Skip to main content

GET /api/embed/:slug/pixel

For AMP pages, email opens, and IoT firmware that can't run JS. The browser/agent loads the pixel; the server records a single heartbeat beacon. Returns a 1×1 transparent GIF.

Status — coming soon.

Auth​

Public key on the querystring.

Query​

ParamRequiredNotes
kyeszsm_pub_… public key
voptionalsnippet version
kindoptionalalways coerced to heartbeat

Response — 200​

Content-Type: image/gif
Content-Length: 43

(43-byte 1×1 transparent GIF)

Side-effect: one heartbeat row appended to the audit entangled state.

Note that public keys on the querystring DO appear in CDN access logs — that's an acceptable risk for read-only-public keys. Treat any key on a pixel URL as already-public.

Snippet​

<noscript>
  <img src="https://zeqapi.com/api/embed/MY-SLUG/pixel?k=zsm_pub_…&v=1.287.5"
       alt="" width="1" height="1" referrerpolicy="no-referrer" loading="eager">
</noscript>