@arcjet/inspect

@arcjet/inspect

Arcjet utilities for inspecting decisions made by an SDK.

• npm package (@arcjet/inspect)
• GitHub source code (inspect/ in arcjet/arcjet-js)

What is this?

Arcjet attaches lots of metadata to every decision. This package exists to more easily interact with Arcjet decisions for common patterns.

When should I use this?

You can access metadata on decisions directly but you can use this package for common patterns.

Install

This package is ESM only. Install with npm in Node.js:

npm install @arcjet/inspect

Example

import http from "node:http";
import arcjet, { detectBot } from "@arcjet/next";
import { isMissingUserAgent } from "@arcjet/inspect";

// Get your Arcjet key at <https://app.arcjet.com>.
// Set it as an environment variable instead of hard coding it.
const arcjetKey = process.env.ARCJET_KEY;

if (!arcjetKey) {
  throw new Error("Cannot find `ARCJET_KEY` environment variable");
}

const aj = arcjet({
  key: arcjetKey,
  rules: [
    // `detectBot` lets you manage automated clients and bots.
    detectBot({ allow: [], mode: "LIVE" }),
  ],
});

const server = http.createServer(async function (
  request: http.IncomingMessage,
  response: http.ServerResponse,
) {
  const decision = await aj.protect(request);

  if (decision.isDenied()) {
    response.writeHead(403, { "Content-Type": "application/json" });
    response.end(JSON.stringify({ message: "Forbidden" }));
    return;
  }

  if (decision.results.some(isMissingUserAgent)) {
    response.writeHead(403, { "Content-Type": "application/json" });
    response.end(JSON.stringify({ message: "You are a bot!" }));
    return;
  }

  response.writeHead(200, { "Content-Type": "application/json" });
  response.end(JSON.stringify({ message: "Hello world" }));
});

server.listen(8000);

License

Apache License, Version 2.0 © Arcjet Labs, Inc.

Changelog

1.0.0-beta.13 (2025-10-07)

🚀 New Features

• add @arcjet/nuxt (#5243) (c40b5f0)
• protocol: Add NUXT to ArcjetStack (#5242) (a386cf0)

🪲 Bug Fixes

• fastify: better protocol detection, minimal request interface (#5270) (51d3bdb)
• support ESM types in dependencies (#5269) (ef67a15)

🧹 Miscellaneous Chores

• deps-dev: bump tar-fs from 2.1.3 to 2.1.4 in /examples/remix-express (#5245) (421ef10)
• deps: bump axios from 1.8.2 to 1.12.2 in /examples/nextjs-permit (#5247) (ad5fe70)
• deps: bump axios from 1.8.3 to 1.12.2 in /examples/gatsby-rate-limit (#5255) (139509f)
• deps: bump tar-fs from 3.1.0 to 3.1.1 in /examples/gatsby-rate-limit (#5215) (dda4825)
• deps: bump vite from 6.3.4 to 6.3.6 in /examples/astro-integration (#5256) (ca2b8eb)

📚 Tests

• react-router: fix tests on Node 24.9.0 (#5227) (420413b)