Update Bot traffic settings
PATCH https://datafa.st/api/v1/admin/websites/{websiteId}/bot-traffic/settingsUpdate one or more Bot traffic settings for a website. Prefer incremental company and crawler fields so an agent does not overwrite exclusions it did not intend to change.
MCP equivalent:
datafast_bot_traffic_settings_update. MCP requires confirm: true before verification, authentication, or ingestion changes because rejected future requests cannot be recovered.Related: Get Bot traffic settings · Create Bot traffic token
Request
Path parameters
websiteIdstring
required
Website ObjectId used by account tokens to choose which website to query or manage. Website ObjectId. Get it from the dashboard or the List websites API.
Body parameters
verifiedOnlyboolean
true accepts only IP-verified crawlers. false also accepts user-agent-only matches.requireAuthTokenboolean
true rejects requests without the website Bot traffic token. Create a token first.disableCompaniesstring[]
Disable every known agent for these exact company names.
enableCompaniesstring[]
Enable every known agent for these exact company names.
disableCrawlerIdsstring[]
Disable exact agent IDs returned by Get settings.
enableCrawlerIdsstring[]
Enable exact agent IDs returned by Get settings.
excludedCrawlerIdsstring[]
Replace the complete exclusion list. Do not combine with incremental enable or disable fields.
hiddenCrawlersstring[]
Replace crawler IDs hidden from charts only. Does not reduce ingestion or usage.
hideDashboardCardboolean
Hide or show the Bot traffic dashboard card.
groupBystring
crawlers or pages.pageFilterIdsstring[]
Replace dashboard page-filter IDs.
Changing
hiddenCrawlers, hideDashboardCard, groupBy, or pageFilterIds affects display only. Changing verification, authentication, companies, or agents affects future ingestion. Requests rejected by those settings are not stored and cannot be recovered.Response
Returns a JSON object with
status: "success" and endpoint-specific fields in data (and pagination when the endpoint is paginated).Response fields
data[].websiteIdstring
Website ObjectId used by account tokens to choose which website to query or manage.
data[].domainstring
Tracked domain.
data[].settingsobject
Complete normalized settings after the update.
data[].crawlerCatalogarray
Complete company and agent catalog after the update.
Authentication
Requires an owner
dft_ account token with settings:write. Website API keys (df_) cannot call this endpoint.The token must be allowed to access the website in the path, and that website must belong to the token owner.
The account must have active DataFast API access. Read authentication and scopes for token creation and permissions.
Errors
400 — Invalid website ID or JSON, unknown fields, invalid field types, conflicting exclusion updates, or enabling token enforcement before a token exists.
404 — Website not found or the caller is not its owner.
413 — Request body exceeds 8 KB.
See API errors for the standard error envelope, auth failures, validation errors, permission errors, and rate limits.