> For the complete documentation index, see [llms.txt](https://docs.takionapi.tech/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.takionapi.tech/px-mobile.md).

# Perimeter X Mobile

{% hint style="danger" %}
**Trial and plan access is gated.** A PerimeterX bypass can be abused for fraud, so trial access is not automatic, and PXHC additionally requires your key to be whitelisted for the service. Please contact us on [Discord](https://takionapi.tech/discord) or [via mail](mailto:sales@takionapi.tech) , we'll need to verify your business first.
{% endhint %}

{% hint style="info" %}
Check our example bundles in order to validate your implementation against our validate ones, with correct headers order, TLS and flow from our [**Github repo**](https://takionapi.tech/examples)
{% endhint %}

## **What is PerimeterX Mobile?**

PerimeterX, known simply as px (now HUMAN), is a bot-management solution that protects mobile applications, APIs, and web apps from automated threats. It tells human traffic from bot traffic using advanced detection built into the app's SDK.

PerimeterX ships in several forms: web, hold captcha (pxhc), and a mobile version. This documentation focuses specifically on the **mobile** version used in apps on iOS and Android. The web and pxhc variants are covered separately in their respective docs.

## **How to Detect if an Application is Using PerimeterX**

PerimeterX protection can be identified in mobile app requests by inspecting the headers for specific values:

* **For px3:** headers resembling `3:5b0de...3c67add:MO...P5VNA==:1000:6xXz...=`
* **For px2:** headers resembling `2:eyJ1Ijoi...JkZWYyIn0=`

These headers are often passed as `x-px-original-token`, `x-px-authorization`, or `x-px-context`.

<figure><img src="/files/TVCzClmzY2AzV4l3fsoa" alt=""><figcaption></figcaption></figure>

Additionally, look for requests made to URLs such as:

* `https://collector-XXX.perimeterx.net/api/v1/collector/mobile`
* `https://collector-XXX.px-cloud.net/api/v2/collector`

<figure><img src="/files/iqk0OBnKy26f6W1N89mH" alt=""><figcaption></figcaption></figure>

### Some apps using PerimeterX <a href="#some-apps-using-perimeterx" id="some-apps-using-perimeterx"></a>

Some applications known to use PerimeterX for mobile protection:

<table><thead><tr><th>App Name</th><th>Package Name</th></tr></thead><tbody><tr><td>StockX</td><td><pre><code>com.stockx.stockx
</code></pre></td></tr><tr><td>TextNow</td><td><pre><code>com.enflick.android.TextNow
</code></pre></td></tr><tr><td>GrubHub</td><td><pre><code><strong>com.grubhub.android
</strong></code></pre></td></tr><tr><td>My B&#x26;B</td><td><pre><code>com.bathandbody.bbw
</code></pre></td></tr><tr><td>FanDuel</td><td><pre><code><strong>com.fanduel.sportsbook
</strong></code></pre></td></tr><tr><td>PrizePicks</td><td><pre><code>com.myprizepicks.myprizepicks
</code></pre></td></tr></tbody></table>

## Our API

Takion generates you all the **`x-px-*`** related header for interacting without issue into the application endpoints.