---
title: "verifyAgentTracking"
description: "Read-only verification of up to 32 explicitly marked synthetic agent requests on registered installation origins. Requires a server credential with collection-wide telemetry.read. Window: at most 30 minutes within the last 24 hours. TEST/LIVE remain separate. Returns counts and safe diagnostics, never guest data or raw receipts. POST keeps probe URLs and user agents out of query strings. Receipt does not prove agent authentication, consent, booking attribution or global absence of sessions. No-store; no writes."
---

`POST /v1/developer/collections/{collection}/telemetry/agent-verification`

**Operation ID:** `verifyAgentTracking`

Read-only verification of up to 32 explicitly marked synthetic agent requests on registered installation origins. Requires a server credential with collection-wide telemetry.read. Window: at most 30 minutes within the last 24 hours. TEST/LIVE remain separate. Returns counts and safe diagnostics, never guest data or raw receipts. POST keeps probe URLs and user agents out of query strings. Receipt does not prove agent authentication, consent, booking attribution or global absence of sessions. No-store; no writes.

## Contract status

| Field | Value |
| --- | --- |
| Maturity | `preview` |
| Required capability | `telemetry.read` |
| Freshness class | `authenticated-state` |
| Quota cost | `1` |

All operations require a Kismet Developer Bearer credential. Collection and resource authority is resolved from the credential's installation grants; identifiers in the URL never grant access.

## Request parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `collection` | path | string | yes |  |

## Request body

The request body is JSON. The canonical schema is:

```json
{
  "type": "object",
  "properties": {
    "probeId": {
      "type": "string",
      "format": "uuid"
    },
    "environment": {
      "type": "string",
      "enum": [
        "production",
        "staging",
        "development",
        "preview",
        "local"
      ]
    },
    "since": {
      "type": "string",
      "format": "date-time"
    },
    "until": {
      "type": "string",
      "format": "date-time"
    },
    "probes": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "pattern": "^[a-zA-Z0-9_-]{1,64}$"
          },
          "pageUrl": {
            "type": "string",
            "format": "uri",
            "maxLength": 2048
          },
          "userAgent": {
            "anyOf": [
              {
                "type": "string",
                "minLength": 1,
                "maxLength": 1024
              },
              {
                "type": "null"
              }
            ]
          },
          "expectedReceipts": {
            "type": "integer",
            "minimum": 0,
            "maximum": 5
          }
        },
        "required": [
          "id",
          "pageUrl",
          "userAgent",
          "expectedReceipts"
        ],
        "additionalProperties": false
      },
      "minItems": 1,
      "maxItems": 32
    }
  },
  "required": [
    "probeId",
    "environment",
    "since",
    "until",
    "probes"
  ],
  "additionalProperties": false
}
```

Minimal example:

```json
{
  "probeId": "string",
  "environment": "production",
  "since": "string",
  "until": "string",
  "probes": [
    {
      "id": "string",
      "pageUrl": "string",
      "userAgent": "string",
      "expectedReceipts": 0
    }
  ]
}
```

## cURL

Set `KISMET_API_ORIGIN=https://api.ksmt.app` and configure `KISMET_DEVELOPER_API_KEY` in your environment. Run server-credential requests from your backend, not browser code.

```sh
curl --request POST \
  "$KISMET_API_ORIGIN/v1/developer/collections/example-collection/telemetry/agent-verification" \
  --header "Authorization: Bearer $KISMET_DEVELOPER_API_KEY" \
  --header "Accept: application/json" \
  --header "Content-Type: application/json" \
  --data '{"probeId":"string","environment":"production","since":"string","until":"string","probes":[{"id":"string","pageUrl":"string","userAgent":"string","expectedReceipts":0}]}'
```

## Responses

| Status | Meaning |
| --- | --- |
| 200 | Success. |
| 400 | Invalid request parameters or body. |
| 401 | Missing, invalid, expired, or inappropriate credential/session. |
| 403 | Credential lacks the required grant/capability, or an origin/CSRF check failed. |
| 404 | The authorized resource was not found. |
| 429 | Rate limit or quota exceeded; inspect response metadata before retrying. |
| 503 | A required Kismet dependency is temporarily unavailable. |

### 200 response schema

Content type: `application/json`. Required fields, nullable values, and nested structures are defined below.

<details>
<summary>View complete response schema</summary>

```json
{
  "type": "object",
  "properties": {
    "schemaVersion": {
      "type": "number",
      "enum": [
        1
      ]
    },
    "environment": {
      "type": "string",
      "enum": [
        "production",
        "staging",
        "development",
        "preview",
        "local"
      ]
    },
    "complete": {
      "type": "boolean"
    },
    "ok": {
      "type": "boolean"
    },
    "probes": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string"
          },
          "expectedReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "matchedReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "fetchReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "viewReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "serverReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "humanSessionReceipts": {
            "type": "integer",
            "minimum": 0
          },
          "diagnostics": {
            "type": "array",
            "items": {
              "type": "string",
              "enum": [
                "MISSING_RECEIPT",
                "DUPLICATE_RECEIPT",
                "UNEXPECTED_RECEIPT",
                "NOT_SERVER_FETCH",
                "HUMAN_SESSION_PRESENT",
                "INCOMPLETE_EVIDENCE"
              ]
            }
          }
        },
        "required": [
          "id",
          "expectedReceipts",
          "matchedReceipts",
          "fetchReceipts",
          "viewReceipts",
          "serverReceipts",
          "humanSessionReceipts",
          "diagnostics"
        ],
        "additionalProperties": false
      },
      "maxItems": 32
    }
  },
  "required": [
    "schemaVersion",
    "environment",
    "complete",
    "ok",
    "probes"
  ],
  "additionalProperties": false
}
```

</details>

## Machine-readable sources

- [This page as Markdown](/api/reference/verify-agent-tracking.md)
- [Developer API OpenAPI v0.7.61](/openapi.json)