Request signals

GET /posts/the-shape-of-an-api · 2026-08-13T10:45:34.229Z

request.cf (Cloudflare signals)

asn

16509

asOrganization

Anthropic, PBC

botManagement

{
  "score": 1,
  "corporateProxy": false,
  "verifiedBot": true,
  "staticResource": false,
  "ja3Hash": "3ecca3dbeb12219c1e1b21318539e34d",
  "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
  "ja4Signals": {
    "ips_rank_1h": 195,
    "reqs_rank_1h": 22,
    "heuristic_ratio_1h": 0.2501572,
    "h2h3_ratio_1h": 0.7203799,
    "cache_ratio_1h": 0.02609447,
    "reqs_quantile_1h": 0.99992347,
    "ips_quantile_1h": 0.99932176,
    "browser_ratio_1h": 0.006799693,
    "paths_rank_1h": 17,
    "uas_rank_1h": 188
  },
  "jsDetection": {
    "passed": false
  },
  "detectionIds": [
    118965407,
    50331656,
    33563859
  ]
}

city

Columbus

clientAcceptEncoding

gzip, deflate, br

clientQuicRtt

clientTcpRtt

clientTrustScore

colo

CMH

continent

country

edgeL4

{
  "deliveryRate": 1822529
}

edgeRequestKeepAliveStatus

httpProtocol

HTTP/2

isEUCountry

false

latitude

39.96118

longitude

-82.99879

metroCode

535

postalCode

43215

region

Ohio

regionCode

requestHeaderNames

{}

requestPriority

weight=16;exclusive=0;group=0;group-weight=0

timezone

America/New_York

tlsCipher

AEAD-AES256-GCM-SHA384

tlsClientAuth

{
  "certPresented": "0",
  "certVerified": "NONE",
  "certRevoked": "0",
  "certIssuerDN": "",
  "certSubjectDN": "",
  "certIssuerDNRFC2253": "",
  "certSubjectDNRFC2253": "",
  "certIssuerDNLegacy": "",
  "certSubjectDNLegacy": "",
  "certSerial": "",
  "certIssuerSerial": "",
  "certSKI": "",
  "certIssuerSKI": "",
  "certFingerprintSHA1": "",
  "certFingerprintSHA256": "",
  "certNotBefore": "",
  "certNotAfter": "",
  "certRFC9440": "",
  "certRFC9440TooLarge": false,
  "certChainRFC9440": "",
  "certChainRFC9440TooLarge": false
}

tlsClientCiphersSha1

WUS9+h7TjVkF9aEouGuCEMjGQGA=

tlsClientExtensionsSha1

QGsB0B+slkxX3JA0QrghUnZgpAY=

tlsClientExtensionsSha1Le

jmt79TXeRqM+grx1ngd2EZYlxdk=

tlsClientHelloLength

258

tlsClientRandom

ZiOv0zbbDNGVp0/G9iWh5wkGqFY24ZWPPVYpIKdXZbk=

tlsExportedAuthenticator

{
  "clientHandshake": "08eb8f7d408274d9181fed9d981976b206128f8902d9ac511d08a4805a3aa7449dbedd4ae573ce0576b7be47f425d16b",
  "serverHandshake": "cea80e56997d54b8b4e3ca41bcbbc89090261dea7f64462e840dfdd4d28ac2cb144945785b98d16160dfad3e05794e90",
  "clientFinished": "d63b3bd4e6dfa921b7d352f61d364f07f1f3f57d2ee6be1a5b5c9f522688d3aa3dfc9a543d1e58de46c1844358bbf766",
  "serverFinished": "57cd0670de0ea02b72e6459dd5410e3c2eeaee2226e55b30f1aa2313fd1fec693b18bac71ecfc707e5879e8f341df193"
}

tlsVersion

TLSv1.3

verifiedBotCategory

AI Crawler

Cookies sent by browser

(none)

Request headers

*/*

accept-encoding

gzip, br

cf-connecting-ip

216.73.217.120

cf-ipcity

Columbus

cf-ipcontinent

cf-ipcountry

cf-iplatitude

39.96118

cf-iplongitude

-82.99879

cf-metro-code

535

cf-postal-code

43215

cf-ray

a2a72188db5f2c38

cf-region

Ohio

cf-region-code

cf-timezone

America/New_York

cf-visitor

{"scheme":"https"}

connection

Keep-Alive

host

in-nexarq.cftenant.com

true-client-ip

216.73.217.120

user-agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

x-forwarded-proto

https

x-real-ip

216.73.217.120

Papers a quiet little blog

← All posts

The Shape of an API

R. Vasquez · Feb 27, 2026

An API is a contract, but it is also a conversation. The first version is always too talkative.

Watch what people actually do with your API for a few weeks. The endpoints they ignore are not the ones to delete; they are the ones to study. Maybe the name was wrong. Maybe the shape was.

Subtract before you add. Every method removed is a method that does not have to be supported until the heat death of the universe.