CrawlCheck Graph API
The Graph API from CrawlCheck — 1 operation(s) for graph.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-graph-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crawlcheck Io Graph API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Graph across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Graph
paths:
/api/graph/{id}:
get:
operationId: graphResolve
summary: Resolve a finding id (f1:), decision id (d1:), manifest/artifact sha256 or…
parameters:
- name: id
in: path
required: true
schema:
type: string
- name: x-crawlcheck-key
in: header
required: true
schema:
type: string
responses:
'200':
description: '{ok, id, type, …}'
content:
application/json:
examples:
worked:
summary: Produced by the production Worker code against a stored copy of a real record; ids, keys and tokens are placeholders. Self-scan fetch URLs are shown as the URL measured, as records made from 2026-10-02 store them.
value:
ok: true
id: qfk9rgfwyg
resolved_at: '2026-10-01T02:29:45.318Z'
type: report
domain: crawlcheck.io
scanned_at: '2026-10-01T00:20:26.380Z'
grade: A
overall: 98
refused: false
report:
id: qfk9rgfwyg
report: https://crawlcheck.io/r/qfk9rgfwyg
json: https://crawlcheck.io/api/v1/reports/qfk9rgfwyg
graph: https://crawlcheck.io/api/graph/qfk9rgfwyg
archived: false
provenance:
v: 1
observer: crawlcheck-worker
observer_build: 6cfcf7ce-8085-465a-8512-f0f20b9667b3
observer_tag: e601314400977abe
vantage:
kind: cloudflare-worker
colo: IAD
rulepack: sv26
audit_version: 4
meg_v: 3
scope: full
observed_at: '2026-10-01T00:20:26.380Z'
stored_at: '2026-10-01T00:20:41.321Z'
artifacts: manifest:b0779b26a1e4c773344541a287e961f901ba26ae918333baf571aff331b32eae
findings: 0
decisions: 0
manifest_signature:
alg: Ed25519
kid: hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo
sig: P7STtrvl52vtKTguLaUsWHNo_YOWYn72IY4YvgxlC40EQpSaLb1v-5uRTgJ5JcC4J2c5-2kNf79iSGVydaARCg
message: 'crawlcheck-meg-manifest-v1
b0779b26a1e4c773344541a287e961f901ba26ae918333baf571aff331b32eae'
key_directory: https://crawlcheck.io/.well-known/http-message-signatures-directory
verify: https://crawlcheck.io/api/verify/manifest?sha=b0779b26a1e4c773344541a287e961f901ba26ae918333baf571aff331b32eae
decisions: []
experiences:
- id: ex1:57ffceab3b0ecfa80b80e652d25c234f
role: page
identity: crawlcheck
url: https://crawlcheck.io/
status: 200
bytes: 38200
sha256: 57b7c7805cc132c0d93d1b9d6048a4665a1f901134b71fa08dd000e059b65cd6
stored: kept
request_profile: rp1:9b061033b296c934
artifact: https://crawlcheck.io/api/artifact/57b7c7805cc132c0d93d1b9d6048a4665a1f901134b71fa08dd000e059b65cd6
- id: ex1:f85d179d5803798768c3a53278dde738
role: machine_file
identity: crawlcheck
url: https://crawlcheck.io/robots.txt
status: 200
bytes: 1761
sha256: 24b6492540e4fb1580c26a1c810e525ff0ff61cb6fe61f5971fd996ad589f5dd
stored: already_held
request_profile: rp1:9b061033b296c934
artifact: https://crawlcheck.io/api/artifact/24b6492540e4fb1580c26a1c810e525ff0ff61cb6fe61f5971fd996ad589f5dd
- id: ex1:c5a8f4b88327ee16fb4b1dc8eddcb1a3
role: machine_file
identity: crawlcheck
url: https://crawlcheck.io/sitemap.xml
status: 200
bytes: 633
sha256: 63644ae116a28cb4ea0db6dac1daf214b9ea9714141652e7bc863a2b3a682cf5
stored: kept
request_profile: rp1:9b061033b296c934
artifact: https://crawlcheck.io/api/artifact/63644ae116a28cb4ea0db6dac1daf214b9ea9714141652e7bc863a2b3a682cf5
manifest: https://crawlcheck.io/api/graph/b0779b26a1e4c773344541a287e961f901ba26ae918333baf571aff331b32eae
sealed:
digest: 66f29854593df99bde371941b15765ef34061fbdae05a9f1e802ec6a8afa5fdf
sealed: false
pending: true
unverifiable: false
why: null
date: null
root: null
score_version: 26
bitcoin_block: null
schema:
type:
- object
- 'null'
properties:
ok:
type:
- boolean
- 'null'
id:
type:
- string
- 'null'
resolved_at:
type:
- string
- 'null'
type:
type:
- string
- 'null'
domain:
type:
- string
- 'null'
scanned_at:
type:
- string
- 'null'
grade:
type:
- string
- 'null'
overall:
type:
- number
- 'null'
refused:
type:
- boolean
- 'null'
report:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
report:
type:
- string
- 'null'
json:
type:
- string
- 'null'
graph:
type:
- string
- 'null'
archived:
type:
- boolean
- 'null'
additionalProperties: true
provenance:
type:
- object
- 'null'
properties:
v:
type:
- number
- 'null'
observer:
type:
- string
- 'null'
observer_build:
type:
- string
- 'null'
observer_tag:
type:
- string
- 'null'
vantage:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
colo:
type:
- string
- 'null'
additionalProperties: true
rulepack:
type:
- string
- 'null'
audit_version:
type:
- number
- 'null'
meg_v:
type:
- number
- 'null'
scope:
type:
- string
- 'null'
observed_at:
type:
- string
- 'null'
stored_at:
type:
- string
- 'null'
artifacts:
type:
- string
- 'null'
findings:
type:
- number
- 'null'
decisions:
type:
- number
- 'null'
manifest_signature:
type:
- object
- 'null'
properties:
alg:
type:
- string
- 'null'
kid:
type:
- string
- 'null'
sig:
type:
- string
- 'null'
message:
type:
- string
- 'null'
key_directory:
type:
- string
- 'null'
verify:
type:
- string
- 'null'
additionalProperties: true
additionalProperties: true
decisions:
type:
- array
- 'null'
items: {}
experiences:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
role:
type:
- string
- 'null'
identity:
type:
- string
- 'null'
url:
type:
- string
- 'null'
status:
type:
- number
- 'null'
bytes:
type:
- number
- 'null'
sha256:
type:
- string
- 'null'
stored:
type:
- string
- 'null'
request_profile:
type:
- string
- 'null'
artifact:
type:
- string
- 'null'
additionalProperties: true
manifest:
type:
- string
- 'null'
sealed:
type:
- object
- 'null'
properties:
digest:
type:
- string
- 'null'
sealed:
type:
- boolean
- 'null'
pending:
type:
- boolean
- 'null'
unverifiable:
type:
- boolean
- 'null'
why: {}
date: {}
root: {}
score_version:
type:
- number
- 'null'
bitcoin_block: {}
additionalProperties: true
additionalProperties: true
x-schema-source: worked-example
'404':
description: Unknown id or no licence
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n 'https://crawlcheck.io/api/graph/qfk9rgfwyg'"
security:
- licenceKey: []
x-auth: the owner's session only; anonymous callers get the public shape or 403
tags:
- Graph
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml