Managed partners contact Citable before setup — we operate the edge stack. Self-hosted teams self-provision ingest credentials in Connectors; contact us only if you want hands-on help.
What the pipeline does
Every classified request produces telemetry in one or both stores:
Analytics Engine powers live counts (overview, time series, bot breakdown). ClickHouse holds row-level events for lag analysis, joins, and long retention.
Architecture
The edge layer always forwards requests to your origin. Telemetry is fire-and-forget and does not block responses.Authentication
Ingest acceptsPOST https://ingest.getcitable.com with header x-auth-token.
We store
token:{token} → siteId in Cloudflare KV. Ingest returns 401 for missing, invalid, or revoked tokens.
Event payload
Minimum fields your Worker (or our edge proxy) must send:siteId must match the value Citable registered when we provisioned your credentials.
Choose your path
Managed — trusted partners
Best when you want Citable to operate the full stack:- Contact Citable to request managed proxy access
- Follow AI Traffic Proxy (Managed)
- Add CNAME →
proxy.getcitable.com, verify in Connectors
Self-hosted — your Cloudflare zone
Best when you already manage Cloudflare Workers:- Open Connectors → AI Traffic Proxy → Self-hosted Cloudflare Worker
- Copy
siteIdand ingest token into your Worker (see Cloudflare Worker guide) - Deploy on your zone
Verify data is flowing
- Agent Analytics → Edge Traffic — overview and bot breakdown (Analytics Engine)
- High-signal events should reach ClickHouse within about a minute of test traffic
- For self-hosted: run the
curlsmoke test in the Cloudflare Worker guide
Common questions
Can I use ingest without a Worker?
Can I use ingest without a Worker?
Ingest expects classified edge events in the
ObserveEvent format. In practice you need a Worker (managed or self-hosted) on the request path. Direct browser or server calls are not the intended integration.Do I need separate ingest setup for managed proxy?
Do I need separate ingest setup for managed proxy?
No. When Connectors shows Active, Citable has already provisioned KV, the ingest token, and edge-proxy routing. You only add DNS.
Can I switch from self-hosted to managed later?
Can I switch from self-hosted to managed later?
Yes — contact us. We can migrate your
siteId, provision managed routes, and coordinate token rotation so there is no gap in telemetry.I lost my self-hosted ingest token
I lost my self-hosted ingest token
Disconnect the self-hosted connector in Connectors and create new credentials, or use Regenerate token when available. Update your Worker secret with
npx wrangler secret put CITABLE_INGEST_TOKEN.Does disconnecting revoke my token?
Does disconnecting revoke my token?
Managed: disconnecting in Connectors deletes KV entries and revokes the token. Self-hosted: contact us to revoke; remove or update the secret in your Worker.
Related
- AI Traffic Proxy (Managed)
- Cloudflare Worker (Self-Hosted)
- Google Analytics — complementary; does not replace edge crawler/agent visibility