insights
Post Events
Accept a batch of visitor events from the floo JS SDK.
Unauthenticated. IP-rate-limited. The body is parsed as JSON
regardless of the declared Content-Type header — the SDK uses
text/plain specifically so that navigator.sendBeacon and
cross-origin fetch both count as CORS “simple requests” and skip
preflight. The server still validates the body with the same
Pydantic schema as if it were JSON.
The app_id must resolve to an existing app — we don’t leak
whether the ID was malformed vs missing vs simply unknown.
POST
Post Events
Response
Successful Response
Acknowledgement for a successful ingest.