Skip to content
Dustin's AI Lab
Go back

Don't Brute-Force Sites That Need a Login—Your Token Is Your Account

Don't point an AI agent at sites that require a login. Your token is your account, and when the banhammer comes down you're gone. Pay a little for a third-party scraping API and offload the ban risk.


Honestly, for sites that need a login, I always tell regular users not to go head-to-head with them—just find a third-party scraping database API.

Your Token Is Your Account

The reason is simple: your token is your account. Push it too far, and the moment the admin drops a “two-dimensional foil” on you, your account is gone.

The two-dimensional foil is a reference from The Three-Body Problem. It means a dimensional-reduction strike—the other side doesn’t argue with you, it just flattens you (the banhammer comes down).

I had a precious old account I’d used since 2012, and I lost it because I got reckless myself.

Hand It to a Professional Scraping API

Use a throwaway, you say? The time cost of producing throwaways could go toward plenty of other things.

So hand it to a professional scraping API, pay a little, and offload the risk. Throwaway-account scraping is their specialty, and going toe-to-toe with anti-scraping doesn’t scare them.

Technically you can of course have an agent log into a backend and crawl it page by page—but being able to do it isn’t the same as it being something you should do yourself.


Share this post on:

Previous Post
Two Reminders for Vibe Coders: Learn System Architecture First, the Value Is in the Thinking
Next Post
A Student's Seven-Agent Setup That Wouldn't Run — A Cautionary Tale About Harness First