Why is traffic not being blocked?
Monocle does not block traffic by default. Make sure you have implemented enforcement in your system, or configured a supported integration such as Cloudflare.
Similar questions
Why am I not seeing any data?
Check that your Monocle script is correctly installed, your publishable key is valid, and traffic is reaching your application.
Why might the Monocle script fail to load?
This is usually caused by mcl.io being blocked by a firewall, DNS filter, or endpoint security tool. Confirm the domain is allowlisted, and test in an incognito window or from another network to isolate the cause.
Why did my Monocle assessment volume suddenly drop?
A sudden drop in assessment volume is usually caused by a change on your side — a recent deployment, a Content Security Policy (CSP) update, or a Cloudflare configuration change — rather than a Spur outage. Check your worker logs and recent configuration changes first. If volume still looks incorrect after that, contact support@spur.us with the time the drop started and any recent changes you made.
Why is my traffic marked as a VPN or proxy?
Monocle identifies traffic based on known infrastructure, behavior, and network signals. In some cases, shared networks or ISP routing may appear similar to anonymized traffic.
Do I need a backend to use Monocle?
No. You can use Monocle to gain visibility into traffic intelligence via the Monocle UI without acting on it. With a supported integration like Cloudflare, traffic can be enforced directly from the UI based on policy configuration. A backend is only required if you want to decrypt assessments or apply custom enforcement logic.
Related guides & explainers
Understanding Monocle Application Health Status
Each Monocle application shows a health status badge indicating whether it's actively sending traffic. Learn what each color means and what to check if an application goes quiet.
Expanding IP and Service Rows in the Explorer
Click any IP or service row in the Monocle Explorer's breakdown tables to expand an inline detail panel, without leaving the table.
What "Client Proxies" Means in Spur Data
"Client Proxies" in Spur data describes proxy-network activity Spur observed coming from an IP — it does not mean the IP is owned or operated by the listed provider.
Why the Organization Field Isn't Available the Same Way Across Spur's Data Feeds
The Context API's per-IP organization field isn't guaranteed in every data feed. Each feed has a different schema and covers a different slice of IP space, so field availability varies by feed.