CrawlCheck Capabilities API
The Capabilities API from CrawlCheck — 1 operation(s) for capabilities.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-capabilities-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crawlcheck Io Capabilities API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Capabilities across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Capabilities
paths:
/api/capabilities:
get:
operationId: listVerifiedCapabilities
summary: Declared agent capabilities with safety class, verification state and…
parameters:
- name: domain
in: query
required: true
schema:
type: string
- name: verified
in: query
schema:
type: string
enum:
- '1'
responses:
'200':
description: capabilities
content:
application/json:
examples:
worked:
summary: Captured from production on 2026-09-30 (MDT).
value:
ok: true
kind: crawlcheck-capabilities
version: '1.0'
subject:
domain: crawlcheck.io
host: crawlcheck.io
report_id: ippi98ekc6
scanned_at: '2026-10-01T00:19:20.736Z'
observed: true
sources:
- kind: api_catalog
url: https://crawlcheck.io/.well-known/api-catalog
status: 200
bytes: 936
sha256: f855381f78e6c94b752b5ab18b0f4108dca99863f219afec0b5441abbc97ad7b
parsed: true
why: null
captured: true
- kind: openapi
url: https://crawlcheck.io/openapi.json
status: 200
bytes: 42912
sha256: 1f7546b85f6844edaba565f5fb3a7182dc2593f46e5ee9496eddc9ba47e20aa0
parsed: true
why: null
captured: true
declared: 70
by_safety_class:
unknown: 28
read_only_public: 30
read_only_authenticated: 6
identity_or_account: 3
irreversible_write: 2
metadata_only: 1
by_verification:
not_attempted: 68
auth_mismatch: 2
verified: []
mismatches:
- capability_id: cap1:8655468542c92f7520a1
operation: getMachineRecordV1
kind: declared_public_observed_auth
declared: no authentication required
observed: HTTP 403
- capability_id: cap1:42eadb623d4bb657d4f8
operation: fixMostlyCode
kind: declared_public_observed_auth
declared: no authentication required
observed: HTTP 403
verification:
checked_at: '2026-10-01T00:19:25.414Z'
policy: public GETs with no required input and one read-only MCP tool with no required input, on the scanne…
counts:
probes: 3
verified: 0
mismatches: 2
error: null
mcp:
endpoint: https://crawlcheck.io/mcp
initialized: false
listed_tools: null
called: null
call_ok: null
note: the server did not complete initialize (HTTP 405)
probes:
- {}
- {}
items:
- capability_id: cap1:8bb96a671dd402ecc2f9
protocol: openapi
operation: scan
method: POST
endpoint: https://crawlcheck.io/api/scan
source: https://crawlcheck.io/openapi.json
safety_class: unknown
authentication: none
params_required: 1
verification: not_attempted
verified: false
verified_at: null
not_attempted_because: 'classed unknown: only read-only public actions are ever called'
- capability_id: cap1:a96e80b074fb14c891ee
protocol: openapi
operation: scanDomainV1
method: POST
endpoint: https://crawlcheck.io/api/v1/scan
source: https://crawlcheck.io/openapi.json
safety_class: unknown
authentication: none
params_required: 1
verification: not_attempted
verified: false
verified_at: null
not_attempted_because: 'classed unknown: only read-only public actions are ever called'
reading: verified means CrawlCheck called it and the response matched what the site declared; not_attempted …
schema:
type:
- object
- 'null'
properties:
ok:
type:
- boolean
- 'null'
kind:
type:
- string
- 'null'
version:
type:
- string
- 'null'
subject:
type:
- object
- 'null'
properties:
domain:
type:
- string
- 'null'
host:
type:
- string
- 'null'
report_id:
type:
- string
- 'null'
scanned_at:
type:
- string
- 'null'
additionalProperties: true
observed:
type:
- boolean
- 'null'
sources:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
url:
type:
- string
- 'null'
status:
type:
- number
- 'null'
bytes:
type:
- number
- 'null'
sha256:
type:
- string
- 'null'
parsed:
type:
- boolean
- 'null'
why: {}
captured:
type:
- boolean
- 'null'
additionalProperties: true
declared:
type:
- number
- 'null'
by_safety_class:
type:
- object
- 'null'
properties:
unknown:
type:
- number
- 'null'
read_only_public:
type:
- number
- 'null'
read_only_authenticated:
type:
- number
- 'null'
identity_or_account:
type:
- number
- 'null'
irreversible_write:
type:
- number
- 'null'
metadata_only:
type:
- number
- 'null'
additionalProperties: true
by_verification:
type:
- object
- 'null'
properties:
not_attempted:
type:
- number
- 'null'
auth_mismatch:
type:
- number
- 'null'
additionalProperties: true
verified:
type:
- array
- 'null'
items: {}
mismatches:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
capability_id:
type:
- string
- 'null'
operation:
type:
- string
- 'null'
kind:
type:
- string
- 'null'
declared:
type:
- string
- 'null'
observed:
type:
- string
- 'null'
additionalProperties: true
verification:
type:
- object
- 'null'
properties:
checked_at:
type:
- string
- 'null'
policy: {}
counts:
type:
- object
- 'null'
properties:
probes:
type:
- number
- 'null'
verified:
type:
- number
- 'null'
mismatches:
type:
- number
- 'null'
additionalProperties: true
error: {}
mcp:
type:
- object
- 'null'
properties:
endpoint:
type:
- string
- 'null'
initialized:
type:
- boolean
- 'null'
listed_tools: {}
called: {}
call_ok: {}
note:
type:
- string
- 'null'
additionalProperties: true
probes:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties: {}
additionalProperties: true
additionalProperties: true
items:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
capability_id:
type:
- string
- 'null'
protocol:
type:
- string
- 'null'
operation:
type:
- string
- 'null'
method:
type:
- string
- 'null'
endpoint:
type:
- string
- 'null'
source:
type:
- string
- 'null'
safety_class:
type:
- string
- 'null'
authentication:
type:
- string
- 'null'
params_required:
type:
- number
- 'null'
verification:
type:
- string
- 'null'
verified:
type:
- boolean
- 'null'
verified_at: {}
not_attempted_because:
type:
- string
- 'null'
additionalProperties: true
reading: {}
additionalProperties: true
x-schema-source: worked-example
'404':
description: no record
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n 'https://crawlcheck.io/api/capabilities?domain=crawlcheck.io'"
security: []
x-auth: public; no credential read
tags:
- Capabilities
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml