SOCIAL MEDIA
Wellfound Public Session API
Mint an anonymous Wellfound browsing session (DataDome cookie, Apollo signature and persisted-query map) with no credentials and no account. Returns an opaque blob for the Wellfound read operations. The blob is bound to the exit IP that minted it: pass the same proxyUrl to every call in a chain, or omit it on all of them.
How to call it
Send one POST to api.upapi.io/wellfound-public-session.post with your key in the X-Api-Key header and the parameters below as a JSON body. Each call spends 6 weighted units of your monthly quota. The operation times out after 60 seconds. Responses are not cached; every call runs the operation.
POST https://api.upapi.io/wellfound-public-session.post
Wellfound Public Session API reference
Request parameters
- proxyUrl
- string — Exit to mint from (http://user:pass@host:port). Omit to send directly. The returned session is bound to whatever exit minted it, so every later call must pass the SAME value.
- impersonate
- string — curl_cffi browser-impersonation target used to mint the session.
Response fields
- session
- stringrequired — Opaque anonymous session blob. Pass to wellfound-browse-jobs, wellfound-job-detail and wellfound-company-overview. Carries no account credentials.
- elapsedMs
- integerrequired — Wall-clock time spent minting.
- operationCount
- integerrequired — Persisted queries discovered in Wellfound's bundle (a health signal).
Example request and response
The example response is generated from this operation’s published output schema — it shows the shape and field names, not values from a recorded call.
{
"impersonate": "chrome146"
}{
"session": "example",
"elapsedMs": 1,
"operationCount": 1
}Code snippets
cURL
curl -X POST https://api.upapi.io/wellfound-public-session.post \
-H 'Content-Type: application/json' \
-H 'x-api-key: YOUR_API_KEY' \
-d '{ "impersonate": "chrome146" }'JavaScript
const response = await fetch('https://api.upapi.io/wellfound-public-session.post', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'x-api-key': 'YOUR_API_KEY',
},
body: JSON.stringify({
"impersonate": "chrome146"
}),
});
const data = await response.json();
console.log(data);Python
import requests
response = requests.post(
'https://api.upapi.io/wellfound-public-session.post',
headers={
'Content-Type': 'application/json',
'x-api-key': 'YOUR_API_KEY',
},
json={
"impersonate": "chrome146"
},
)
print(response.json())Go
package main
import (
"bytes"
"encoding/json"
"fmt"
"io"
"net/http"
)
func main() {
payload := []byte(`{ "impersonate": "chrome146" }`)
req, _ := http.NewRequest("POST", "https://api.upapi.io/wellfound-public-session.post", bytes.NewBuffer(payload))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("x-api-key", "YOUR_API_KEY")
client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
var result map[string]any
json.Unmarshal(body, &result)
fmt.Println(result)
}PHP
<?php
$payload = json_encode([
'impersonate' => 'chrome146',
]);
$ch = curl_init('https://api.upapi.io/wellfound-public-session.post');
curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => $payload,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
'x-api-key: YOUR_API_KEY',
],
]);
$response = curl_exec($ch);
curl_close($ch);
$data = json_decode($response, true);
var_dump($data);Ruby
require 'net/http'
require 'uri'
require 'json'
uri = URI('https://api.upapi.io/wellfound-public-session.post')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == 'https'
request = Net::HTTP::Post.new(uri.path)
request['Content-Type'] = 'application/json'
request['x-api-key'] = 'YOUR_API_KEY'
request.body = { "impersonate": "chrome146" }.to_json
response = http.request(request)
puts JSON.parse(response.body)Java
import okhttp3.*;
import com.fasterxml.jackson.databind.ObjectMapper;
import java.util.Map;
OkHttpClient client = new OkHttpClient();
ObjectMapper mapper = new ObjectMapper();
String json = "{ \"impersonate\": \"chrome146\" }";
RequestBody body = RequestBody.create(json, MediaType.get("application/json"));
Request request = new Request.Builder()
.url("https://api.upapi.io/wellfound-public-session.post")
.post(body)
.addHeader("Content-Type", "application/json")
.addHeader("x-api-key", "YOUR_API_KEY")
.build();
try (Response response = client.newCall(request).execute()) {
Map<?, ?> result = mapper.readValue(response.body().string(), Map.class);
System.out.println(result);
}C#
using System.Net.Http;
using System.Net.Http.Json;
using System.Text.Json;
using var client = new HttpClient();
client.DefaultRequestHeaders.Add("x-api-key", "YOUR_API_KEY");
var payload = JsonSerializer.Deserialize<object>("{ \"impersonate\": \"chrome146\" }");
var response = await client.PostAsJsonAsync("https://api.upapi.io/wellfound-public-session.post", payload);
var result = await response.Content.ReadFromJsonAsync<JsonElement>();
Console.WriteLine(result);Frequently asked questions
How much does the Wellfound Public Session API cost per call?
Each call spends 6 weighted units of your plan's monthly quota. Full pricing is at https://upapi.io/pricing.
How do I authenticate to the Wellfound Public Session API?
Send your key in the X-Api-Key header. A free guest key is available without creating an account.
Are Wellfound Public Session API responses cached?
No — every call runs the operation live; responses are not cached.