CrawlCheck Verify API
The Verify API from CrawlCheck — 2 operation(s) for verify.
Operations 2
POST
/api/verify/bulk
Intelligence line: run every server-side verifier on up to 25 ids in one call…
#
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-verify-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crawlcheck Io Verify API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Verify across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Verify
paths:
/api/verify/bulk:
post:
operationId: verifyBulk
summary: 'Intelligence line: run every server-side verifier on up to 25 ids in one call…'
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- ids
properties:
ids:
type: array
items:
type: string
maxItems: 25
examples:
worked:
summary: The request behind the worked response
value:
ids:
- <report id>
- <report id>
- nope12
responses:
'200':
description: crawlcheck-bulk-verification
content:
application/json:
examples:
worked:
summary: Intelligence add-on. Duplicates are dropped; an unknown id is named, never skipped. Produced by the real Worker code in the build harness against live scans of the named domains, with a test licence and a test Ed25519 key; production signs with the key published at /.well-known/http-message-signatures-directory.
value:
kind: crawlcheck-bulk-verification
v: 1
generated_at: '2026-10-01T16:02:23.244Z'
asked: 3
found: 2
verified: 2
failed: 0
results:
- id: rq574x1trm
report_id: rq574x1trm
domain: treeservicedenverllc.com
scanned_at: '2026-10-01T16:01:17.408Z'
served_from: live
ok: true
found: true
failed: []
ran: 7
checks: 9
bundle: https://crawlcheck.io/api/bundle?id=rq574x1trm
- id: ppkrf128ry
report_id: ppkrf128ry
domain: supremefencingdenver.com
scanned_at: '2026-10-01T16:01:30.568Z'
served_from: live
ok: true
found: true
failed: []
ran: 7
checks: 9
bundle: https://crawlcheck.io/api/bundle?id=ppkrf128ry
- id: nope12
ok: false
found: false
why: no record for that id (unknown, or the domain opted out)
note: Each id runs every server-side verifier on the record it names (the same checks as /api/verify). ok = every check that could run passed. For an offline check, download each bundle and run crawlcheck-verify.mjs.
schema:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
v:
type:
- number
- 'null'
generated_at:
type:
- string
- 'null'
asked:
type:
- number
- 'null'
found:
type:
- number
- 'null'
verified:
type:
- number
- 'null'
failed:
type:
- number
- 'null'
results:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
id:
type:
- string
- 'null'
report_id:
type:
- string
- 'null'
domain:
type:
- string
- 'null'
scanned_at:
type:
- string
- 'null'
served_from:
type:
- string
- 'null'
ok:
type:
- boolean
- 'null'
found:
type:
- boolean
- 'null'
failed:
type:
- array
- 'null'
items: {}
ran:
type:
- number
- 'null'
checks:
type:
- number
- 'null'
bundle:
type:
- string
- 'null'
why:
type:
- string
- 'null'
additionalProperties: true
note:
type:
- string
- 'null'
additionalProperties: true
x-schema-source: worked-example
'403':
description: no Intelligence add-on
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s -X POST \\\n -H \"x-crawlcheck-key: $CRAWLCHECK_KEY\" \\\n -H \"content-type: application/json\" \\\n -d '{\"ids\":[\"<report id>\",\"<report id>\",\"nope12\"]}' \\\n 'https://crawlcheck.io/api/verify/bulk'"
security:
- licenceKey: []
- bearer: []
x-auth: 'a licence key (x-crawlcheck-key or Authorization: Bearer) or the signed-in /manage session; 401 or 403 otherwise'
x-crawlcheck-budget:
request_body_max: 8388608
items: 'Intelligence add-on key required (403 without); then ids: up to 25 per call; compare: up to 40 domains per call (400 over)'
tags:
- Verify
servers:
- url: https://crawlcheck.io
/api/verify:
get:
operationId: verifyRecord
summary: 'Every verifier in one call: record digest, seal + Bitcoin anchor, manifest…'
parameters:
- name: id
in: query
required: true
schema:
type: string
description: 'report id, d1: decision id, f1: finding id, or manifest sha256'
responses:
'200':
description: '{ok, id, checks[{name, ok, why}], summary{passed, failed, unverifiable}}'
content:
application/json:
examples:
worked:
summary: Captured from production on 2026-09-30 (MDT).
value:
served_from: live
bundle: https://crawlcheck.io/api/bundle?id=ippi98ekc6
ok: true
id: ippi98ekc6
domain: crawlcheck.io
scanned_at: '2026-10-01T00:19:20.736Z'
report: https://crawlcheck.io/r/ippi98ekc6
checks:
- name: record_digest
ok: true
why: the record recomputes to the digest recorded for it
digest: 8d77c01e77e3c718e61c0ea13d30e1d52baab91b65a2340a732684bb21146386
recorded: 8d77c01e77e3c718e61c0ea13d30e1d52baab91b65a2340a732684bb21146386
- name: seal
ok: null
why: the day 2026-10-01 has not been sealed yet (the seal runs after the day closes, 01:17 UTC)
date: '2026-10-01'
digest: 8d77c01e77e3c718e61c0ea13d30e1d52baab91b65a2340a732684bb21146386
- name: manifest_signature
ok: true
why: signature verifies against the published key
manifest: ad05cfd2309695534a6996770d0720f8f39c6f584e54df6c72c649fe2cf19b4e
kid: hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo
key_directory: https://crawlcheck.io/.well-known/http-message-signatures-directory
- name: manifest_stored
ok: true
why: stored manifest hashes to its key (20216 bytes)
manifest: ad05cfd2309695534a6996770d0720f8f39c6f584e54df6c72c649fe2cf19b4e
bytes: 20216
summary:
passed: 7
failed: 0
unverifiable: 2
total: 9
note: 'each check is its own answer; unverifiable means the record predates that layer or the day has not sealed, never a failure. Independent recomputation: the record digest is SHA-256 of the canonical proof subject (/proof), the seal is a Merk…'
schema:
type:
- object
- 'null'
properties:
served_from:
type:
- string
- 'null'
bundle:
type:
- string
- 'null'
ok:
type:
- boolean
- 'null'
id:
type:
- string
- 'null'
domain:
type:
- string
- 'null'
scanned_at:
type:
- string
- 'null'
report:
type:
- string
- 'null'
checks:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
name:
type:
- string
- 'null'
ok:
type:
- boolean
- 'null'
why:
type:
- string
- 'null'
digest:
type:
- string
- 'null'
recorded:
type:
- string
- 'null'
date:
type:
- string
- 'null'
manifest:
type:
- string
- 'null'
kid:
type:
- string
- 'null'
key_directory:
type:
- string
- 'null'
bytes:
type:
- number
- 'null'
additionalProperties: true
summary:
type:
- object
- 'null'
properties:
passed:
type:
- number
- 'null'
failed:
type:
- number
- 'null'
unverifiable:
type:
- number
- 'null'
total:
type:
- number
- 'null'
additionalProperties: true
note: {}
additionalProperties: true
x-schema-source: worked-example
'404':
description: No record for that id
x-codeSamples:
- lang: Shell
label: curl
source: "curl -s \\\n 'https://crawlcheck.io/api/verify?id=ippi98ekc6'"
security: []
x-auth: public; no credential read
tags:
- Verify
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml