Express quickstart

Package @camada/node, on npm.

1. Install

npm i @camada/node

2. Environment

The key is printed once when you create a project in the app. Set these as environment variables: export them in the shell that starts your app, or keep them in .env and start it with node --env-file=.env (Node 20.6+). Node reads no .env file on its own.

export CAMADA_KEY=<ingest_token>.<snap_token>
export CAMADA_INGEST_URL=http://localhost:8787   # dev only; defaults to production ingest

3. Wire it in

import camada from '@camada/node';
app.use(camada.express());

• Works for Connect-style stacks too.
• Register it before your routes so blocked requests never reach them.

4. Add the beacon to HTML pages

Optional but recommended. The beacon cuts false positives by showing which sessions are real browsers. Use the helper, or <CamadaBeacon/> from @camada/react.

import camada from '@camada/node';
res.send(`<head>${camada.scriptTag(req)}</head>…`);

5. Send app outcomes

Login failures, signups and checkout declines are the signals no edge position sees. The identifier is HMAC-hashed in your process. How they catch credential stuffing.

import camada from '@camada/node';
camada.track(req, 'login_failed', { user: email });

• !Enforcement at this position covers IP and path entries. ASN and TLS-fingerprint entries fail open in-app.
• !Memory: about 5 MB per loaded snapshot.
• !CAMADA_SERVERLESS=1 switches to lazy refresh with no interval timer.

Kill switch: CAMADA_DISABLED=1, checked per request. All other variables are listed in the docs index.