api | install-astro | install-caddy | install-cloudflare | install-express | install-js-tag | install-netlify | install-nginx | install-shopify | install-squarespace | install-sveltekit | install-vercel-next | install-webflow | install-wix | install-wordpress | mcp | outcomes | privacy | quickstart | troubleshooting

Troubleshooting

Start with GET /v1/sites/{site_id}/status (or MCP verify_install). Then:

receiving: false

Check	How
Deployed after installing?	The collector or tag must be in the live build.
Hitting the live domain?	Preview URLs, localhost and staging hosts are ignored: events must be for the registered domain (or its www.).
Domain matches exactly?	AMBIT_SIGNAL_SITE must equal the registered domain, for example example.com (no scheme, no path).
Secret set in production?	Vercel/Netlify env vars are per environment; Cloudflare needs AMBIT_SIGNAL_SECRET as type Secret; WordPress: Settings > Ambit Signal.
Clock correct (self-hosted)?	Signed batches must be within 300 seconds of our time. Run NTP.
JS tag loading?	Browser dev tools > Network: signal.js 200 and a collect request 204. Ad blockers and a strict Content-Security-Policy can block it: allow https://signal.ambit.agency in script-src and connect-src.
Do Not Track on?	The JS tag sends nothing with DNT on. Test in a normal window.
Consent mode?	With data-consent="required" nothing is sent until window.ambitSignal.consent(true).
Private network?	Visits from private or LAN IPs (office network behind the same router as the server, localhost) are dropped on purpose. Test from a phone on mobile data.

Receiving, but no bots

• A JS-tag-only install cannot see bots. Add a server collector (Cloudflare Worker on hosted builders).
• A full-page cache (WP Rocket, Cloudflare APO, Varnish) answers without running PHP or middleware. Collect at the edge with the Cloudflare Worker instead.
• New or low-traffic sites may simply not have been crawled yet.

Ingest errors (server collectors)

Code	Meaning
401	Unknown site, wrong secret, stale timestamp or replayed batch. Re-check AMBIT_SIGNAL_SITE / AMBIT_SIGNAL_SECRET; rotate the secret if unsure.
413	Batch over 256 KB or 500 events. Send smaller batches.
429	Over 120 signed posts per minute. Batch more events per post.

Numbers look low

• AI apps often strip the referrer. That traffic shows up as ai_estimated (timing inference) or as plain direct traffic. This is a limit of the platforms, not the install.
• Tiers are reported separately and are never added together.
• Outcome value counts only what you report through /v1/outcomes.

Still stuck

Send the site_id, platform and the status output to hello@ambit.agency. Never send the secret.