# Identify Source of API Call (Script or Other)

**URL:** <https://community.dreamfactory.com/t/identify-source-of-api-call-script-or-other/3631>\
**Category:** Server-Side Scripting\
**Tags:** community, rest\
**Created:** [February 10, 2017, 2:18pm UTC](https://community.dreamfactory.com/t/identify-source-of-api-call-script-or-other/3631 "2017-02-10T14:18:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![soleson](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@soleson](https://community.dreamfactory.com/u/soleson)\
**Post date:** [February 10, 2017, 2:18pm UTC](https://community.dreamfactory.com/t/identify-source-of-api-call-script-or-other/3631/1 "2017-02-10T14:18:02Z")

</div>

Is there any way to identify an API call from a script vs other?

I’d like to build a logging interface upon GET/POST/UPDATE/DELETE and if I need the script to do any form of lookup for the logging action, it’ll create an indefinite loop. I’ve considered placing a custom attribute into the payload for those requests, but from a security standpoint, I’d need a way for users to not be able to spoof that to prevent logging.

A couple Ideas to start:

1. Add a custom value to the payload array.
2. Find a value that is only known internally and changes upon each request so that I can validate it.
3. Some referrer or other identifiable variable in the platform or event objects that would indicate the source.

Thank you in advance for your help.