Cloudflare Trace API
Free Cloudflare trace endpoint with no key: your IP, country, data centre, TLS version, HTTP protocol and user agent as plain text. Instant, no signup. Tested.
Endpoint tested and returned HTTP 200 on 20 Aug 2026
What is the Cloudflare Trace API?
The Cloudflare trace endpoint is a free, key-free diagnostic that returns your public IP address, country, the Cloudflare data centre serving you, TLS version, HTTP protocol and user agent as simple key=value plain text.
This endpoint exists on every Cloudflare-fronted site at `/cdn-cgi/trace`, which means it is available almost everywhere and backed by Cloudflare's global network — it is about as reliable as a diagnostic endpoint gets.
It tells you more than an IP lookup: the `colo` field reveals which Cloudflare data centre served you as an IATA airport code, and `tls` and `http` show the actual protocol versions negotiated. That combination is genuinely useful for debugging CDN and connectivity issues.
Quick facts
- Base URL
https://www.cloudflare.com/cdn-cgi/trace- Authentication
- No API key required.
- Rate limit
- No published limit — it is served at the edge.
- Pricing
- Free.
- CORS
- Enabled — callable directly from browser JavaScript
- Official docs
- Read the docs
How to use the Cloudflare Trace API
Every request below was executed against the live API on 20 Aug 2026, and the response shown is the real body it returned — not an illustration.
1. Get connection and location diagnostics
GET https://www.cloudflare.com/cdn-cgi/trace
curl 'https://www.cloudflare.com/cdn-cgi/trace'const res = await fetch("https://www.cloudflare.com/cdn-cgi/trace");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);import requests
res = requests.get("https://www.cloudflare.com/cdn-cgi/trace", timeout=20)
res.raise_for_status()
print(res.json())fl=179f23
h=www.cloudflare.com
ip=182.185.143.210
ts=1787176672.000
visit_scheme=https
uag=ByteTools-APIDirectory/1.0 (+https://bytetools.bytevancer.com; contact@bytevancer.com)
colo=KHI
sliver=none
http=http/1.1
loc=PK
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off
rbi=off
kex=X25519MLKEM768Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
(none) | path | Optional | The endpoint takes no parameters. Available on any Cloudflare-fronted domain. |
Response fields
(plain text)text- Newline-separated key=value pairs, not JSON. Split on newlines then on '='.
ipstring- Your public IP address.
locstring- Two-letter country code, derived at the edge.
colostring- Cloudflare data centre IATA code, e.g. LHR — which POP served you.
tlsstring- Negotiated TLS version, e.g. TLSv1.3.
httpstring- HTTP protocol version, e.g. http/2 or http/3.
uagstring- Your user agent string as received.
tsstring- Server timestamp.
What you can build with the Cloudflare Trace API
- Detect a visitor's country without an IP geolocation service
- Debug which CDN edge location is serving a user
- Check whether HTTP/3 and TLS 1.3 are actually negotiated
- Build a lightweight connection diagnostics page
Common errors and how to fix them
JSON parse error
The response is plain text, not JSON.
Fix: Split on newlines, then on the first '=' in each line.
loc is missing
Country detection occasionally fails.
Fix: Fall back to a geolocation API rather than assuming the field is present.
CORS blocked in the browser
The endpoint does not send CORS headers.
Fix: Call it from your server, or use your own Cloudflare-fronted domain's /cdn-cgi/trace, which is same-origin.
Cloudflare Trace API — frequently asked questions
What is /cdn-cgi/trace?
A diagnostic endpoint Cloudflare exposes on every site behind its network, returning your IP, country, the serving data centre, TLS version and HTTP protocol as plain text.
Is it free?
Yes, free with no API key. It is served at Cloudflare's edge with no meaningful rate limit.
What is the colo field?
The IATA airport code of the Cloudflare data centre that served your request — LHR for London, for example. It is genuinely useful for diagnosing CDN routing.
Can I call it from my own site?
Yes, if your site is behind Cloudflare, your own domain's /cdn-cgi/trace is same-origin, which sidesteps the CORS restriction on the cloudflare.com endpoint.
Tools that pair with this API
Alternatives to Cloudflare Trace API
If Cloudflare Trace does not fit, these developer & testing apis cover similar ground. Every one was called before publishing, and each links to its own reference page with a working curl command and the response it returned.
| API | What it does | Auth | CORS | Last verified |
|---|---|---|---|---|
| GitHub REST API | GitHub REST API with no key for public data: repository details, users, issues, releases and commits. 60 req/hour unauthenticated, 5,000 with a token. | No key | Yes | 19 Aug 2026 |
| JSONPlaceholder | Free fake REST API for testing and prototyping. Posts, comments, users and todos with full GET, POST, PUT and DELETE support. No key. Real curl examples. | No key | Yes | 19 Aug 2026 |
| Postman Echo | Postman Echo reflects your HTTP request back as JSON: headers, body, query params and auth. Free, no key, ideal for debugging clients. Real POST example. | No key | No | 19 Aug 2026 |
| DummyJSON | Free fake REST API with realistic products, users, carts, recipes and auth. Supports search, pagination, sorting and POST. No key. Tested GET and POST examples. | No key | Yes | 19 Aug 2026 |
| CocoaPods Trunk | Query the CocoaPods Trunk API for a pod's published versions and release timestamps with no key. Includes the non-ISO date format and version-ordering gotchas. | No key | No | 21 Aug 2026 |
| Codeberg (Forgejo) | Free Codeberg API with no key for public data: repository search, issues, releases and users on the non-profit Git host. Same API as Gitea and Forgejo. Tested. | No key | No | 20 Aug 2026 |
Cloudflare Trace is an independent third-party service and is not affiliated with ByteTools or ByteVancer. Details on this page were verified on 20 Aug 2026; always check the official documentation before relying on this API in production, as terms and limits can change.