aid: arcjet url: https://raw.githubusercontent.com/api-evangelist/arcjet/refs/heads/main/apis.yml name: Arcjet kind: company description: Arcjet is a security-as-code platform for developers, delivering rate limiting, bot detection, email validation, sensitive-information detection, and a Shield WAF as building blocks embedded directly in application code via SDKs. The SDK is the primary interface; it runs a local WebAssembly analysis module and calls Arcjet's Decide service - a Connect/gRPC (protobuf) decision API at decide.arcjet.com - for stateful decisions like rate limiting and advanced bot detection. image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg tags: - Security - Rate Limiting - Bot Detection - WAF - Developer Security created: '2026-06-20' modified: '2026-06-20' specificationVersion: '0.19' apis: - aid: arcjet:arcjet-decide-api name: Arcjet Decide API tags: - Decision - Protect - Connect - gRPC image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/architecture baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/architecture type: Documentation - url: https://docs.arcjet.com/reference/nodejs type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI - url: collections/arcjet.postman_collection.json type: PostmanCollection - url: collections/arcjet.opencollection.json type: OpenCollection - url: https://github.com/arcjet/arcjet-js type: GitHub description: The core Connect/gRPC decision service (proto.decide.v1alpha1.DecideService, Decide and Report RPCs) that the Arcjet SDK calls for stateful security decisions. ConnectRPC supports gRPC over HTTP/2 and an HTTP/1.1 + JSON POST fallback to the same service. This is not a typical public REST API - the SDK is the primary, supported interface; the transport is documented here conservatively for reference. - aid: arcjet:arcjet-rate-limiting name: Arcjet Rate Limiting tags: - Rate Limiting - Throttling - Quotas image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/rate-limiting/concepts baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/rate-limiting/concepts type: Documentation - url: https://docs.arcjet.com/rate-limiting/reference type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI description: Token-bucket, fixed-window, and sliding-window rate limiting configured as code and enforced through the SDK, with cross-request state tracked by the cloud Decide service. Limits are keyed on characteristics such as IP, user ID, or API key. - aid: arcjet:arcjet-bot-detection name: Arcjet Bot Detection tags: - Bot Detection - Bots - Automation image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/bot-protection/concepts baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/bot-protection/concepts type: Documentation - url: https://docs.arcjet.com/bot-protection/reference type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI description: Identifies and classifies automated clients, allowing or denying known bots by category. Basic identification runs locally in the SDK WebAssembly module; advanced bot signals are resolved via the cloud Decide service. - aid: arcjet:arcjet-email-validation name: Arcjet Email Validation tags: - Email Validation - Signup - Anti-Fraud image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/email-validation/concepts baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/email-validation/concepts type: Documentation - url: https://docs.arcjet.com/email-validation/reference type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI description: Validates email addresses for syntax, deliverability, disposable and no-MX-record domains, and free providers, used to block fake or fraudulent signups. Invoked through the SDK against the Decide service. - aid: arcjet:arcjet-sensitive-info-detection name: Arcjet Sensitive Information Detection tags: - Sensitive Info - PII - Data Protection image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/sensitive-info/concepts baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/sensitive-info/concepts type: Documentation - url: https://docs.arcjet.com/sensitive-info/reference type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI description: Detects PII and other sensitive data (emails, phone numbers, credit cards, IP addresses, or custom patterns) in request bodies. Detection runs locally in the SDK WebAssembly module so sensitive content need not leave the application. - aid: arcjet:arcjet-shield-waf name: Arcjet Shield WAF tags: - Shield - WAF - Attack Protection image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/shield/concepts baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/shield/concepts type: Documentation - url: https://docs.arcjet.com/shield/reference type: APIReference - url: openapi/arcjet-openapi.yml type: OpenAPI description: WAF-like protection against common attacks such as SQL injection, cross-site scripting, and other OWASP-style threats, applied to requests flowing through the SDK and evaluated by the Decide service. - aid: arcjet:arcjet-sdks name: Arcjet SDKs tags: - SDK - JavaScript - TypeScript - Python image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg humanURL: https://docs.arcjet.com/get-started baseURL: https://decide.arcjet.com properties: - url: https://docs.arcjet.com/get-started type: Documentation - url: https://github.com/arcjet/arcjet-js type: GitHub - url: https://www.npmjs.com/package/arcjet type: SDK description: The primary, supported interface to Arcjet. SDKs ship for Node.js, Next.js, Bun, Deno, SvelteKit, NestJS, Remix, Astro, React Router, Fastify, and Python, each wrapping the Connect/gRPC Decide protocol and the local WebAssembly analysis module. common: - type: GitHubOrganization url: https://github.com/arcjet - type: LinkedIn url: https://www.linkedin.com/company/arcjet - type: Website url: https://arcjet.com - type: Documentation url: https://docs.arcjet.com - type: Plans url: plans/arcjet-plans-pricing.yml - type: RateLimits url: rate-limits/arcjet-rate-limits.yml - type: FinOps url: finops/arcjet-finops.yml maintainers: - FN: Kin Lane email: kin@apievangelist.com