Vercel BotID now leverages Vercel's verified bot directory

Starting in botid@1.5.0, BotID’s Deep Analysis mode provides authenticated information for verified bots based on Vercel's directory of known and verified bots. This allows developers to detect verified bots in real time and make programmatic decisions based on bot identity.

This allows you to securely allow known bots that are good for your business (such as agentic bots that purchase on behalf of users) while blocking other bots and sophisticated abuse.

BotID is an invisible CAPTCHA that classifies sophisticated bots without interrupting real users. With this update, developers using Deep Analysis now get additional context about the bot itself, such as source IP range, reverse DNS, and user-agent validation, helping teams fine-tune how bots are handled before taking action.

1
import { checkBotId } from "botid/server";
2
 
3
export async function POST(request: Request) {
4
  const botResult = await checkBotId();
5
 
6
  const { isBot, verifiedBotName, isVerifiedBot, verifiedBotCategory } = botResult;
7
 
8
  // Check if it's ChatGPT Operator
9
  const isOperator = isVerifiedBot && verifiedBotName === "chatgpt-operator";
10
 
11
  if (isBot && !isOperator) {
12
    return Response.json({ error: "Access denied" }, { status: 403 });
13
  }
14
 
15
  // ... rest of your handler
16
  return Response.json(botResult);
17
}

Get started with BotID and check out the documentation for verified bots in BotID.