Skip to main content
The Blocklist API lets you manage blocked contacts, blocked email domains, and blocked IP addresses. Blocked visitors are ignored by the AI — instead of an automated response they receive a short message explaining they cannot contact the company right now. You can customise that message per organization in Settings → Autopilot.

Blocked Contacts

Block individual contacts by email. Useful for stopping the AI from responding to abusive users, spam accounts, or internal test contacts.

Blocked Domains

Block entire email domains (e.g. “spam.com”). All contacts with emails on blocked domains will be ignored by the AI. Supports blocking multiple domains at once.

Blocked IPs

Block a single address (e.g. “203.0.113.7”) or a whole CIDR range (e.g. “203.0.113.0/24”), IPv4 or IPv6. Useful against widget abuse where the visitor keeps creating throwaway contacts, so contact- and domain-blocking never bite. The address is resolved from Cloudflare’s CF-Connecting-IP header, which cannot be forged by the client. A client IP is only observable on the web/widget channels; once a session has been seen from a blocked address the block continues to apply to that session on every channel.

Available Endpoints

List Blocked Contacts

List all blocked contacts

Block Contact

Block a contact by email

Check Contact

Check if a contact is blocked

Unblock Contact

Remove a contact from the blocklist

List Blocked Domains

List all blocked domains

Block Domains

Block one or more email domains

Check Domain

Check if a domain or email is blocked

Unblock Domain

Remove a domain from the blocklist

List Blocked IPs

List all blocked IPs and CIDR ranges

Block IPs

Block one or more IP addresses or ranges

Check IP

Check if an IP is blocked

Unblock IP

Remove an IP from the blocklist