Count a website view or Install click

POST 
/public/apps/:slug/events

kudoscrm.com's listing funnel, sent by navigator.sendBeacon — so form-encoded (kind=view); JSON, text/plain and multipart bodies are read too, and no content type is required. Cookies are ignored. Bots, link previews, HTTP libraries and blank user agents are dropped silently (still 204). Each visitor counts once per app, kind and UTC day, by a hash of the day, IP and user agent keyed with a salt that is thrown away daily. Throttle: public/apps/events/ip, 60 a minute.

Request

Responses

204

Counted, deduplicated, or dropped as a bot.

Response Headers

Access-Control-Allow-Origin

*, without credentials, for any origin but the ones the app itself is served from: a https://<subdomain>.kudoscrm.com origin is echoed, with Access-Control-Allow-Credentials: true. The apex https://kudoscrm.com gets *. No Origin header, no CORS headers.

400

The request body is not valid JSON.

404

Not found in this workspace — or not something the caller may know exists.

422

invalid_kind.

429

A throttle refused the request. Wait Retry-After seconds — the time left in the refusing window plus 0–3 s of jitter. The X-RateLimit-* headers describe the bucket that refused it.

Response Headers

Retry-After
X-RateLimit-Limit
X-RateLimit-Remaining
X-RateLimit-Reset

Seconds until the window rolls.