Manifest position 348 · CrUX rank bucket 1000

https://api.id.me

Blocked after retries

Audit stopped during recon because The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge ("Performing security verification"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.

Attempts

3 / 3

Judged checks

0 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
respect-user-preferences `respects-reduced-motion`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
respect-user-preferences `respects-contrast`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
implement-natural-interactions `view-transitions`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
implement-natural-interactions `scroll-driven-animations`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
implement-natural-interactions `physical-gestures`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
provide-guided-navigation `scroll-state-aware-chrome`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
provide-guided-navigation `anchored-positioning`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
provide-guided-navigation `directs-attention`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
maximize-content-reduce-noise `no-intrusive-interruptions`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
maximize-content-reduce-noise `semantic-dismissible-primitives`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
maximize-content-reduce-noise `reduced-chrome`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
adapt-to-the-form-factor `component-level-responsiveness`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
adapt-to-the-form-factor `input-modality-aware`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
support-core-task-success `clear-purpose-and-primary-action`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
support-core-task-success `primary-flow-completion`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
support-core-task-success `clear-system-state-and-recovery`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-fast-and-stable `good-core-web-vitals`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-fast-and-stable `visual-stability`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-fast-and-stable `efficient-main-thread`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-fast-and-stable `efficient-resource-delivery`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-fast-and-stable `trim-unused-and-duplicate-code`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-inclusive `names-roles-labels`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-inclusive `sufficient-contrast`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-inclusive `structure-and-focus`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-inclusive `legible-text`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-inclusive `zoom-reflow-targets-and-media`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
follow-best-practices `no-console-errors`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
follow-best-practices `sound-document-and-assets`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
follow-best-practices `browser-platform-hygiene`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-discoverable `title-and-description`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-discoverable `crawlable-and-mobile-friendly`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-discoverable `canonical-and-indexing-signals`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-discoverable `structured-and-shareable-metadata`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-private-and-secure `secure-transport-and-headers`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-private-and-secure `data-minimisation-and-third-parties`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-private-and-secure `in-context-permissions-and-modern-auth`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-private-and-secure `defensive-browser-policies`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-resilient `progressive-enhancement`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-resilient `resilient-runtime-behaviour`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-resilient `offline-and-installable`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-resilient `network-and-http-failure-states`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-internationalised `lang-dir-and-logical-properties`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-internationalised `locale-aware-data`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-internationalised `time-zone-correctness`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-trustworthy `no-dark-patterns`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-trustworthy `humane-error-handling`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-trustworthy `trustworthy-input-assistance`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-trustworthy `safe-commercial-and-account-flows`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-sustainable `optimised-assets`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-sustainable `no-wasteful-work`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-sustainable `third-party-and-media-budget`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-agent-ready `structured-agent-capabilities`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-agent-ready `on-device-inference`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-memory-efficient `no-leak-under-repeated-interaction`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-memory-efficient `bounded-footprint`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	blocked	high	CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.

Provenance

Canonical report: results/atomic/reports/0348-api_id_me.json
Report SHA-256: 7d6f12b04caaf18ecae377b0a2a44f6a3975c52afeb219e705d2666926289c3f
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/api_id_me/2026-07-27T20-31-38-466Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/api_id_me/2026-07-27T20-31-38-466Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.