identify() for a visitor (see Tracking & events). A site is addressed by {siteKey} (UUID or domain). All endpoints require Authorization: Bearer {token}.
These endpoints return real visitor data — identifier, name, avatar, and behavioral history — for the authenticated team’s own visitors only. A site user always belongs to exactly one site; a foreign site user id returns 404, never another team’s data.
Both endpoints accept the shared date range and filter query parameters. The date range scopes differently on each: on the list it selects who to return (people last seen in the window); on the profile it scopes the range-bound metrics and timeline, not which person is returned.
List site users
last_seen_at descending. This is a paginated endpoint — it returns the standard data / meta / links envelope (see Conventions).
Query parameters
Plus the shared filter keys, which narrow the behavioral metrics (pageviews, sessions, revenue, etc.) computed for each returned person.
Response — each item in
data:
Status:
200 OK.
Get a site user’s profile
{siteUser} id belonging to another site (or another team) returns 404.
Path parameters
Query parameters
Plus the shared filter keys.
Response
Status:
200 OK. 404 Not Found when siteUser does not belong to siteKey’s site.

