Everything you need to install the tag, understand what you're charged for, and send identified people where they're useful.
REST API
Enrich people, verify emails, look up mobiles, and pull identified visitors.
MCP server
Give Claude, Cursor, or your own agent WhoLayer tools with spend caps.
Integrations
Send people to Slack, HubSpot, Klaviyo, and signed webhooks.
Quickstart
- Create an account. You get 100 free credits every month and unlimited company-level ID.
- Copy your site ID from Settings, Sites and paste this tag into the
<head>of every page:
<script async src="https://cdn.wholayer.com/t.js" data-site="YOUR_SITE_ID"></script>- Connect a destination, such as Slack or HubSpot, under Integrations.
- Visit your own site from a new browser. Company matches usually appear within a minute; person matches within five.
Using a consent banner? Load the tag only after the visitor accepts analytics or marketing cookies, or call wholayer("consent", true) once consent is given. Outside the US we never attempt person-level matches.
Shopify
In Shopify admin, open Online Store, Themes, Edit code, and paste the snippet into theme.liquid just before </head>. A one-click Shopify app is coming soon.
Google Tag Manager
Add a Custom HTML tag containing the snippet above, triggered on All Pages, and gate it on your consent variable if you use one.
Concepts
Credits
Every product draws from one monthly wallet. You're charged only when we return something, never for a lookup that comes back empty.
| Action | Credits |
|---|---|
| Company identified (who's visiting, at the account level) | Free |
| Person identified on your site (name, title, LinkedIn, work email) | 1 |
| Shopper identified for ecommerce (verified personal email, sent to Klaviyo) | 1 |
| Work or personal email found and verified | 1 |
| Mobile number with carrier and line-type check | 5 |
| Email verification only | 0.1 |
| People search results (name, title, company; no contact details) | 1 per 25 |
| Company profile (size, revenue, industry, tech) | 0.2 |
Resolution
When a visitor loads a page, the tag sends a first-party event with the page URL, referrer, a first-party cookie ID, and the browser's IP and user agent. We match that event at two levels:
- Company level: the visitor's network is matched to an organization. Works worldwide and is free.
- Person level: the visitor is matched to an individual in our permissioned US identity graph. One credit per person per month, however many times they come back.
We don't add your visitors' browsing behavior to a shared graph that other customers can query. Your traffic is used to resolve identities for you.
Suppression
Before any person is returned, by the tag, the API, or the MCP server, we check our global suppression list. It holds everyone who has opted out through our privacy request page, the California deletion platform, or a customer's own suppression upload. Suppressed people are never returned and you are never charged for them. You can also upload your own suppression list (existing customers, employees, do-not-contact) under Settings, Suppression.
Webhooks
Add a webhook destination under Destinations in your dashboard to receive visitor.identified and shopper.identified events in real time. Each request is signed with an HMAC-SHA256 signature in the WhoLayer-Signature header. We retry failed deliveries with exponential backoff for 24 hours. See the payload reference.
Need help?
Email support@wholayer.com or send us a message. We reply within one business day.