Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Crawlcheck Io Dns Query API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Dns Query across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Dns Query
paths:
/dns-query:
get:
operationId: resolveOverDns
summary: 'Resolve over DNS (RFC 8484 DNS-over-HTTPS): TXT for ._v.crawlcheck.io carries…'
parameters:
- name: name
in: query
schema:
type: string
- name: type
in: query
schema:
type: string
- name: dns
in: query
schema:
type: string
responses:
'200':
description: application/dns-message or application/dns-json
content:
application/dns-json:
examples:
worked:
summary: Shape; not a measurement.
value:
Status: 0
Question:
- name: github.com._v.crawlcheck.io
type: 16
Answer:
- name: github.com._v.crawlcheck.io.
type: 16
TTL: 3600
data: '"v=ccr1;d=github.com;st=measured;read=warn;cite=warn;connect=unsupported;transact=require_confirmation;o=…;f=…;l=…;k=…;x=…;s=…"'
schema:
type:
- object
- 'null'
properties:
Status:
type:
- number
- 'null'
Question:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
name:
type:
- string
- 'null'
type:
type:
- number
- 'null'
additionalProperties: true
Answer:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
name:
type:
- string
- 'null'
type:
type:
- number
- 'null'
TTL:
type:
- number
- 'null'
data: {}
additionalProperties: true
additionalProperties: true
x-schema-source: worked-example
x-codeSamples:
- lang: Shell
label: curl
source: curl -s 'https://crawlcheck.io/dns-query?name=github.com._v.crawlcheck.io&type=TXT'
security: []
x-auth: public; no credential read
tags:
- Dns Query
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml