Website intelligence in one call

Send a domain and receive a structured report about that site: who to contact, what it runs on, how it protects visitors, and what needs attention. Built for agents and tools that need website facts without an account, a key, or a contract.

The endpoint

GET /v1/site-intelligence?domain=example.com

POST /v1/site-intelligence with a JSON body of { "domain": "example.com" }

How payment works

1. Call the endpoint. Without payment it answers 402 with the price, the asset, the network, and the receiving address.

2. Pay with any x402 client and send the same call again with the payment proof attached.

3. The report returns at once, and the payment settles on chain to the receiving address.

What the report includes

• Public contact details the site itself publishes: emails, tap to call numbers, and social profiles.

• Tech stack clues found in the page: WordPress, Shopify, Squarespace, Wix, Next.js, React, and library versions such as jQuery.

• Transport security: whether HTTPS answers, what plain HTTP does, and whether strict transport security is on.

• Response headers that protect visitors, and any header that announces a software version.

• DNS records: address records, mail records, and text records.

• Certificate basics: issuer, dates, and days remaining.

• Hygiene findings, each with a severity, so a reader can sort what matters first.

Example report

{
  "domain": "example.com",
  "reachable": true,
  "finalUrl": "https://example.com/",
  "transport": { "https": true, "httpBehavior": "serves_http", "hsts": false },
  "certificate": { "issuer": "Cloudflare TLS Issuing ECC CA 3", "daysRemaining": 56 },
  "findings": [
    { "severity": "high", "code": "HTTP_SERVES_CONTENT", "message": "The site serves content over plain HTTP instead of sending every visitor to HTTPS." },
    { "severity": "medium", "code": "MISSING_HSTS", "message": "No strict transport security header was sent." },
    { "severity": "medium", "code": "MISSING_CSP", "message": "No content security policy header was sent." }
  ],
  "summary": { "high": 1, "medium": 3, "low": 2, "info": 0 }
}

Abridged. A real report also carries contacts, tech stack, the full header set, DNS records, and every finding.

More routes on this service

GET /v1/page-reader?url=https://example.com at 0.01 USDC per call. Clean readable text and metadata extracted from one web page.

GET /v1/domain-profile?domain=example.com at 0.01 USDC per call. Registration basics, a DNS summary, and subdomains drawn from public certificate logs.

GET /v1/dns-lookup?domain=example.com at 0.002 USDC per call. The full DNS record set for one domain.

GET /v1/site-check?domain=example.com at 0.001 USDC per call. A quick check: HTTPS reachability, HTTP behaviour, certificate days remaining, and security header presence.

GET /v1/page-metadata?url=https://example.com at 0.002 USDC per call. Title, description, canonical, Open Graph and Twitter card tags, icons, and structured data types from one web page.

GET /v1/feed-reader?url=https://example.com/feed.xml at 0.005 USDC per call. An RSS, Atom, or RDF feed normalized into dated items with summaries.

GET /v1/sitemap?domain=example.com at 0.002 USDC per call. The sitemaps a domain declares and the page addresses inside them.

GET /v1/redirect-trace?url=https://example.com at 0.001 USDC per call. Every hop a web address takes, with each status and destination.

GET /v1/page-links?url=https://example.com at 0.002 USDC per call. The links on one web page, split into internal and external, with anchor text.

Every route also accepts POST with a JSON body holding the same input.

For machines

The full contract lives at /openapi.json in OpenAPI form.