Identify visitor
POST
/v1/widget/identifyAuth: Site public key (rk_pk_)
Server-side identify endpoint called by the widget. Validates user_hash when verification mode is strict or lenient.
Body parameters
| Name | Type | Description |
|---|---|---|
idrequired | string | Immutable user ID |
user_hash | string | HMAC-SHA256 hex digest |
email | string | Visitor email |
name | string | Display name |
sitePublicKeyrequired | string | rk_pk_… key |
visitorFingerprintrequired | string | Browser fingerprint |
Responses
200Identified visitor
{
"visitor": {
"id": "770e8400-e29b-41d4-a716-446655440002",
"externalId": "usr_123",
"email": "ada@example.com",
"name": "Ada Lovelace",
"attributes": {
"plan": "pro"
},
"createdAt": "2026-01-04T10:00:00Z"
},
"verified": true
}