API Documentation

Entropy0 API Reference

Deterministic Trust, Threat, and Deviation scoring for domains. All responses are structured JSON with engine metadata and explainable signals.

Authentication

Use `Authorization: Bearer <api_key>`. Generate keys from your account dashboard.

Base Paths

Versioned routes: `/v1/domain/score`, `/v1/domain/score/batch`.

Sandbox

Validate requests in UI: Domain Scanner.

POST /v1/domain/score

Scores a domain or URL using deterministic structural analysis.

curl -X POST https://your-host/v1/domain/score \
  -H "Authorization: Bearer sk_ent0_xxxx" \
  -H "Content-Type: application/json" \
  -d '{ "input": "example.com" }'

{
  "scanId": "uuid",
  "input": "example.com",
  "inputType": "domain",
  "trustScore": 82,
  "threat": { "threatScore": 18, "threatLevel": "low" },
  "analysis": { "deviationScore": 12 },
  "signals": { "...": "..." },
  "scan_version": "2",
  "scoring_version": "0.7.0"
}

POST /v1/domain/score/batch

Scores multiple domains in one request (plan-gated limits apply).

curl -X POST https://your-host/v1/domain/score/batch \
  -H "Authorization: Bearer sk_ent0_xxxx" \
  -H "Content-Type: application/json" \
  -d '{ "domains": ["example.com", "paypal.com"] }'

Status Codes and Error Model

`200` successful response.
`400` invalid input payload.
`401` missing or invalid authentication.
`409` concurrency lock active for the same principal.
`429` rate limit or plan quota exceeded.
`500` upstream/provider/internal execution failure.