Overview

Skyfire is a DataDome monetization partner that enables authorized LLM and AI agents to access protected resources through token-based access validation.
When enabled, DataDome validates Skyfire’s issued tokens before granting access to the protected content. DataDome protection remains active to prevent unauthorized LLMs and AI agents from bypassing or tampering with token validation.
This integration keeps detection and enforcement within DataDome, while Skyfire manages revenue for compliant automated traffic.

About Skyfire

Skyfire enables programmatic interaction between buyers (LLM or AI agents) and sellers (DataDome customers) through a token-based identity and payment protocol.
Skyfire uses signed tokens to carry identity and payment information between agents and services. These tokens are structured as JSON Web Tokens (JWTs).
For more details, refer to the Skyfire Documentation.

Prerequisites

Before enabling Skyfire ensure the following:

• Skyfire is enabled as the traffic monetization partner in your DataDome account.
• A Skyfire Seller account
• Update your Datadome server-side module to its lastest version to ensure the token collection
• Ensure that Datadome Protection is enabled on the targeted ressource

Token Validation Logic

Below is a high-level sequence for the traffic monetization flow with Skyfire as the monetization partner:

1. The LLM or AI agent registers with Skyfire to obtain a valid token.
   This can be done programmatically through the Skyfire API or by using their MCP server.
   See:
   • Skyfire APi reference
   • Skyfire MCP Server Documentation.
2. The LLM or AI agent uses this token when accessing the app or web content protected by DataDome.
3. Upon receiving the request:
   • DataDome analyzes incoming request with its standard detection, classifies it (e.g., Bot, LLM agent), and matches it against a dedicated detection model
   • When a request matches a model with the response policy set to Monetize, DataDome detection engine invokes Skyfire token validation flow.
4. DataDome detection engine validates the Skyfire-issued token found in the skyfire-pay-id header, by checking its signature authenticity, expiration, and overall structure.
   • If the token is valid, the access to the protected resource is granted.
   • If the token is invalid or missing, DataDome denies access to the resource.

Monitoring and Reporting

DataDome Dashboard

All Skyfire-related requests and validation outcomes are visible in the DataDome Dashboard.

The dashboard provides:

• Details on requests that trigger Skyfire monetization flow.
• The monetization flow request outcome (Allow or hardblocked).

Skyfire Dashboard

Skyfire provides a separate dashboard for both:

• Buyers (LLMs / AI agents) to monitor their token usage and spend.
• Sellers (DataDome protected website) to track monetized requests and revenue.

Pricing and Revenue

Token and access prices are defined by the seller in their skyfire dashboard. Skyfire manages all payment and revenue processing. DataDome remains the authoritative system for detection and access control.

All financial metrics are visible in Skyfire’s seller/buyer dashboards.

References:

• Skyfire's Buyer workflow
• Skyfire's Seller workflow
• Skyfire's integration one pager