~/api

// rest_api

Every free tool is available over a REST API. Use it to integrate domain checks into CI, monitoring, or your own dashboards.

[ auth ]

[ signup to get a key ]

// Authorize with Authorization: Bearer dbk_... header or ?api_key=dbk_... query param.

[ rate_limits ]

// 60 req/min per key. Responses cached 10 min for identical domain+tool combos.
Every response returns X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset (unix-ts).
Tool responses also include cache_hit, generated_at, cached_until — so you know when to re-query.

[ openapi_spec ]

→ /api/v1/openapi.json

// paste this URL into editor.swagger.io, Redoc, Postman, or Insomnia for an interactive client

[ endpoints ]

GET /api/v1/tools List available tool slugs

GET /api/v1/usage Current API key info + usage stats

GET /api/v1/check/:tool/:domain Run one tool on a domain

GET /api/v1/profile/:domain Composite headline profile (cached 24h)

[ tools ]

ssl dmarc spf mx whois ns dns_propagation security_headers redirect_chain reverse_dns dnssec http_protocol domain_age cookie_audit ct_log_finder rbl email_auth takeover impersonation dkim

// some tools accept extra params: dkim needs selector, dns_propagation takes record_type

[ example ]

# SSL certificate check
curl -H "Authorization: Bearer dbk_your_key_here" \
     https://dombrains.com/api/v1/check/ssl/example.com

# Full headline profile
curl https://dombrains.com/api/v1/profile/example.com?api_key=dbk_your_key_here

[ response ]

{
  "ok": true,
  "domain": "example.com",
  "status": "ok",
  "status_message": "Certificate valid · 67 days left",
  "data": {
    "host": "example.com",
    "issued_by": "DigiCert",
    "days_left": 67,
    "tls_version": "TLSv1.3"
  }
}