Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Audito Lat Deep API
version: 1.0.0
contact:
email: agente@audito.lat
url: https://agent.audito.lat
x-guidance: 'audito: paid website audits for agents. Products: /audit (flat JSON, 0.25 USDC), /report (self-contained HTML report, 0.25 USDC), /deep (technical deep audit: TLS, seven security headers, cookies, DNS and email security SPF-DMARC-DKIM, delivery, AI-agent readiness; JSON, or &format=html for a report, 0.25 USDC). Flow: GET the endpoint, receive 402 with an x402 v2 challenge (USDC on Base, EIP-3009), sign the TransferWithAuthorization, retry with the X-Payment header, receive the result. Free preview: /scan?url=<target>. The paying wallet must hold at least the price; an unfunded signature is refused with reason payer_has_no_funds. Deterministic and reproducible, SSRF-guarded, no signup, no API keys.'
x-logo:
url: https://agent.audito.lat/favicon.ico
description: 'Operations tagged Deep across 2 of this provider''s published API definitions: agent-audito-lat-openapi.json, audito-lat-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://agent.audito.lat
tags:
- name: Deep
paths:
/deep:
get:
operationId: deepAuditSite
summary: 'Technical deep audit: TLS certificate, 7 security headers, cookies, DNS and…'
description: Technical audit as JSON (append &format=html for an HTML report). Checks the TLS certificate, the 7 security headers, cookie flags, DNS and email security (SPF, DMARC, DKIM, CAA, MX), compression and caching, and AI-agent readiness (robots.txt, llms.txt, security.txt, blocked AI crawlers). Every finding is ranked critical/high/medium/low and includes the exact fix to apply.
security: []
parameters:
- name: url
in: query
required: true
schema:
type: string
format: uri
description: Target http(s) URL to audit
- name: format
in: query
required: false
schema:
type: string
enum:
- json
- html
description: Output format; html returns a readable report
x-payment-info:
price:
mode: fixed
currency: USD
amount: '0.25'
protocols:
- x402:
scheme: exact
network: eip155:8453
asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
payTo: '0x6B60905d1a4bC09c3F8a0248bC2209B6Fe2388Bf'
extensions:
bazaar:
info:
input:
type: http
method: GET
queryParams:
url:
type: string
required: true
description: Target http(s) URL to audit
output:
type: json
example:
deep_score: 4
counts:
critical: 1
high: 3
medium: 4
low: 7
paid: true
responses:
'200':
description: Deep audit result (JSON, or HTML with format=html)
'402':
description: Payment required (x402)
tags:
- Deep
servers:
- url: https://agent.audito.lat
x-refined-from:
- agent-audito-lat-openapi.json
- audito-lat-openapi.json
x-discovery:
ownershipProofs:
- '0x6B60905d1a4bC09c3F8a0248bC2209B6Fe2388Bf'