CrawlCheck Rollback API
The Rollback API from CrawlCheck — 2 operation(s) for rollback.
Operations 2
GET
/api/rollback/file
The exact bytes a machine file served in a given record, from the artifact…
#
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-rollback-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crawlcheck Io Rollback API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Rollback across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Rollback
paths:
/api/rollback:
get:
operationId: verifyAndRollback
summary: Compare the record before a fix with the record after it (licence or owner)…
parameters:
- name: from
in: query
schema:
type: string
description: report id before the change
- name: to
in: query
schema:
type: string
description: report id after the change
- name: domain
in: query
schema:
type: string
description: 'instead of from/to: the last re-measured fix for this domain'
responses:
'200':
description: verification
content:
application/json:
examples:
worked:
summary: 'Mixed: llms.txt cleared a finding, the robots.txt edit raised one. The regression is pinned to robots.txt, so the one step restores its stored bytes; llms.txt is left alone. Produced by the production code from the gretel.ai scan of 2026-09-30 (MDT) and a constructed after-record (robots.txt edited, llms.txt published).'
value:
ok: true
kind: crawlcheck-fix-verification
domain: gretel.ai
before:
id: yg3o8ybexx
at: '2026-10-01T02:36:59.974Z'
grade: D
score: 66
score_version: 26
refused: false
after:
id: aftr000001
at: '2026-10-01T03:36:59.974Z'
grade: D
score: 63
score_version: 26
refused: false
comparable: true
verdict: mixed
findings:
cleared:
- code: NO_LLMS_TXT
path: /llms.txt
severity: 1
title: No llms.txt
new:
- code: ROBOTS_RULES_SHADOWED
path: /robots.txt
severity: 3
title: Named AI groups drop the * rules
kept:
- code: DECLARED_SITEMAP_BROKEN
path: /robots.txt
severity: 4
title: robots.txt points at a sitemap that fails
- code: HSTS_MISSING
path: /
severity: 1
title: HTTPS is served without a Strict-Transport-Security header
rows:
now_passing: []
now_failing: []
files:
- path: /llms.txt
state: changed
before:
status: 404
sha256: 90c032f35272ba1a7aa93027ab635e6610d4f24cf9e53c0624d00f065d7c7e7d
bytes: 906
real_file: false
stored: true
after:
status: 200
sha256: cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd
bytes: 1200
real_file: true
- path: /robots.txt
state: changed
before:
status: 200
sha256: 0f8aafa66dda958bf7fc6131b9880efe64850610acaf7ff4f8d44dbd1dd9a9e3
bytes: 372
real_file: true
stored: true
after:
status: 200
sha256: abababababababababababababababababababababababababababababababab
bytes: 999
real_file: true
regressions:
- kind: finding
code: ROBOTS_RULES_SHADOWED
path: /robots.txt
severity: 3
caused_by_files:
- /robots.txt
reads_settings: []
rollback:
needed: true
steps:
- kind: restore
path: /robots.txt
regressions:
- ROBOTS_RULES_SHADOWED
would_also_undo: []
what: put back the exact file served before the change
before_sha256: 0f8aafa66dda958bf7fc6131b9880efe64850610acaf7ff4f8d44dbd1dd9a9e3
bytes: 372
content_type: text/plain
file: https://crawlcheck.io/api/rollback/file?id=yg3o8ybexx&path=%2Frobots.txt
note: The fix cleared some things and broke others; each step lists what rolling it back would also undo.
summary: 'Mixed: 1 finding cleared, 1 new; 0 rows now pass, 0 now fail; D 66 → D 63'
schema:
type:
- object
- 'null'
properties:
ok:
type:
- boolean
- 'null'
kind:
type:
- string
- 'null'
domain:
type:
- string
- 'null'
before:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
at:
type:
- string
- 'null'
grade:
type:
- string
- 'null'
score:
type:
- number
- 'null'
score_version:
type:
- number
- 'null'
refused:
type:
- boolean
- 'null'
additionalProperties: true
after:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
at:
type:
- string
- 'null'
grade:
type:
- string
- 'null'
score:
type:
- number
- 'null'
score_version:
type:
- number
- 'null'
refused:
type:
- boolean
- 'null'
additionalProperties: true
comparable:
type:
- boolean
- 'null'
verdict:
type:
- string
- 'null'
findings:
type:
- object
- 'null'
properties:
cleared:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
code:
type:
- string
- 'null'
path:
type:
- string
- 'null'
severity:
type:
- number
- 'null'
title:
type:
- string
- 'null'
additionalProperties: true
new:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
code:
type:
- string
- 'null'
path:
type:
- string
- 'null'
severity:
type:
- number
- 'null'
title:
type:
- string
- 'null'
additionalProperties: true
kept:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
code:
type:
- string
- 'null'
path:
type:
- string
- 'null'
severity:
type:
- number
- 'null'
title:
type:
- string
- 'null'
additionalProperties: true
additionalProperties: true
rows:
type:
- object
- 'null'
properties:
now_passing:
type:
- array
- 'null'
items: {}
now_failing:
type:
- array
- 'null'
items: {}
additionalProperties: true
files:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
path:
type:
- string
- 'null'
state:
type:
- string
- 'null'
before:
type:
- object
- 'null'
properties:
status:
type:
- number
- 'null'
sha256:
type:
- string
- 'null'
bytes:
type:
- number
- 'null'
real_file:
type:
- boolean
- 'null'
stored:
type:
- boolean
- 'null'
additionalProperties: true
after:
type:
- object
- 'null'
properties:
status:
type:
- number
- 'null'
sha256:
type:
- string
- 'null'
bytes:
type:
- number
- 'null'
real_file:
type:
- boolean
- 'null'
additionalProperties: true
additionalProperties: true
regressions:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
code:
type:
- string
- 'null'
path:
type:
- string
- 'null'
severity:
type:
- number
- 'null'
caused_by_files:
type:
- array
- 'null'
items:
type:
- string
- 'null'
reads_settings:
type:
- array
- 'null'
items: {}
additionalProperties: true
rollback:
type:
- object
- 'null'
properties:
needed:
type:
- boolean
- 'null'
steps:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
path:
type:
- string
- 'null'
regressions:
type:
- array
- 'null'
items:
type:
- string
- 'null'
would_also_undo:
type:
- array
- 'null'
items: {}
what:
type:
- string
- 'null'
before_sha256:
type:
- string
- 'null'
bytes:
type:
- number
- 'null'
content_type:
type:
- string
- 'null'
file:
type:
- string
- 'null'
additionalProperties: true
note:
type:
- string
- 'null'
additionalProperties: true
summary:
type:
- string
- 'null'
additionalProperties: true
x-schema-source: worked-example
'400':
description: no pair of records named
'403':
description: needs a licence or the owner's session
'422':
description: the two records cannot be compared (different domains, or the order is reversed)
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n 'https://crawlcheck.io/api/rollback?from=yg3o8ybexx&to=aftr000001'"
security: []
x-auth: public; no credential read
tags:
- Rollback
servers:
- url: https://crawlcheck.io
/api/rollback/file:
get:
operationId: rollbackFile
summary: The exact bytes a machine file served in a given record, from the artifact…
parameters:
- name: id
in: query
required: true
schema:
type: string
- name: path
in: query
required: true
schema:
type: string
description: e.g. /robots.txt
responses:
'200':
description: the file; x-crawlcheck-sha256 carries its hash
content:
text/plain:
examples:
worked:
summary: The bytes as served in that record; x-crawlcheck-sha256 carries the manifest's hash. Served by the production code on 2026-09-30 (MDT).
value: 'User-agent: *
Disallow: /api/
Sitemap: https://gretel.ai/sitemap.xml
'
schema:
type: string
x-schema-source: worked-example
'403':
description: needs a licence or the owner's session
'404':
description: no file at that path in the record, or the bytes were not kept
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n 'https://crawlcheck.io/api/rollback/file?id=yg3o8ybexx&path=/robots.txt'"
security: []
x-auth: public; no credential read
tags:
- Rollback
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml