I’m at a loss for how this works since agents just use a browser and see the same thing users see
I can tell they're not using it because the page is getting hit by their user agents but my API is not.
Your site, your choices.
But also: hostile design? My choice.