CrawlCheck Keys API
The Keys API from CrawlCheck — 1 operation(s) for keys.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-keys-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crawlcheck Io Keys API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Keys across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Keys
paths:
/api/keys:
get:
operationId: listApiKeys
summary: List the scoped API keys on a licence (names, scopes, last use; never the keys)
parameters:
- name: x-crawlcheck-key
in: header
required: true
schema:
type: string
pattern: ^cc_[0-9a-f]{32}$
responses:
'200':
description: keys[]
content:
application/json:
examples:
worked:
summary: Licence key or signed-in session only; an API key cannot manage keys. Produced by the production Worker code against a stored copy of a real record; ids, keys and tokens are placeholders.
value:
keys:
- id: 6060d2d109ca
name: ci-pipeline
scopes:
- scan
- read
domains:
- crawlcheck.io
created: '2026-10-01T02:29:45.252Z'
expires: '2026-12-30T02:29:45.252Z'
last_used: null
revoked: false
schema:
type:
- object
- 'null'
properties:
keys:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
name:
type:
- string
- 'null'
scopes:
type:
- array
- 'null'
items:
type:
- string
- 'null'
domains:
type:
- array
- 'null'
items:
type:
- string
- 'null'
created:
type:
- string
- 'null'
expires:
type:
- string
- 'null'
last_used: {}
revoked:
type:
- boolean
- 'null'
additionalProperties: true
additionalProperties: true
x-schema-source: worked-example
'401':
description: No valid licence key
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n 'https://crawlcheck.io/api/keys'"
security:
- licenceKey: []
- bearer: []
x-auth: 'a licence key (x-crawlcheck-key or Authorization: Bearer) or the signed-in /manage session; 401 or 403 otherwise'
tags:
- Keys
post:
operationId: createApiKey
summary: Create a scoped API key (shown once; stored as a SHA-256)
parameters:
- name: x-crawlcheck-key
in: header
required: true
schema:
type: string
pattern: ^cc_[0-9a-f]{32}$
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
name:
type: string
scopes:
type: array
items:
type: string
enum:
- scan
- read
- share
domains:
type: array
items:
type: string
days:
type: integer
minimum: 1
maximum: 365
examples:
worked:
summary: The request behind the worked response
value:
name: ci-pipeline
scopes:
- scan
- read
domains:
- crawlcheck.io
days: 90
responses:
'201':
description: key, id, scopes, domains, expires
content:
application/json:
examples:
worked:
summary: The key is shown once. Produced by the production Worker code against a stored copy of a real record; ids, keys and tokens are placeholders.
value:
ok: true
key: ck_0123456789abcdef0123456789abcdef01234567
id: 6060d2d109ca
name: ci-pipeline
scopes:
- scan
- read
domains:
- crawlcheck.io
expires: '2026-12-30T02:29:45.252Z'
note: Shown once. Only a SHA-256 of it is stored, so it cannot be recovered; revoke and create another if it is lost.
schema:
type:
- object
- 'null'
properties:
ok:
type:
- boolean
- 'null'
key:
type:
- string
- 'null'
id:
type:
- string
- 'null'
name:
type:
- string
- 'null'
scopes:
type:
- array
- 'null'
items:
type:
- string
- 'null'
domains:
type:
- array
- 'null'
items:
type:
- string
- 'null'
expires:
type:
- string
- 'null'
note:
type:
- string
- 'null'
additionalProperties: true
x-schema-source: worked-example
'400':
description: No usable scope
'401':
description: No valid licence key
'403':
description: Domain not on the licence
'409':
description: Twenty-key limit reached
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s -X POST \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n -H \"content-type: application/json\" \\\n -d '{\"name\":\"ci-pipeline\",\"scopes\":[\"scan\",\"read\"],\"domains\":[\"crawlcheck.io\"],\"days\":90}' \\\n 'https://crawlcheck.io/api/keys'"
security:
- licenceKey: []
- bearer: []
x-auth: 'a licence key (x-crawlcheck-key or Authorization: Bearer) or the signed-in /manage session; 401 or 403 otherwise'
x-crawlcheck-budget:
request_body_max: 1048576
tags:
- Keys
delete:
operationId: revokeApiKey
summary: Revoke an API key by id
parameters:
- name: x-crawlcheck-key
in: header
required: true
schema:
type: string
pattern: ^cc_[0-9a-f]{32}$
- name: id
in: query
required: true
schema:
type: string
pattern: ^[0-9a-f]{12}$
responses:
'200':
description: Revoked
content:
application/json:
examples:
worked:
summary: Produced by the production Worker code against a stored copy of a real record; ids, keys and tokens are placeholders.
value:
ok: true
revoked: 6060d2d109ca
schema:
type:
- object
- 'null'
properties:
ok:
type:
- boolean
- 'null'
revoked:
type:
- string
- 'null'
additionalProperties: true
x-schema-source: worked-example
'404':
description: No such key on this licence
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s -X DELETE \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n 'https://crawlcheck.io/api/keys?id=2fc581141516'"
security: []
x-auth: public; no credential read
x-crawlcheck-budget:
request_body_max: 1048576
tags:
- Keys
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml