AI-Powered Website Intelligence

Overview

Public endpoints available to API key holders.

• POST /api/v1/scan — start a scan
• GET /api/v1/scan/:scanId — retrieve scan results
• GET /api/v1/health — health check (no auth required)

Authentication

Include your API key in the request header:

X-API-Key: sk-your-api-key

Or use the Authorization header:

Authorization: Bearer sk-your-api-key

Rate Limits

API keys are rate-limited to 1 request per minute. Responses include X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset. On limit exceeded the API returns HTTP 429 and a Retry-After header.

Examples

cURL

curl -X POST https://Subto.One/api/v1/scan \
  -H "X-API-Key: sk-your-api-key" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://Subto.One"}'

JavaScript

fetch('https://Subto.One/api/v1/scan', {
  method: 'POST',
  headers: {
    'X-API-Key': 'sk-your-api-key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({ url: 'https://Subto.One' })
}).then(r => r.json()).then(console.log);

Errors

Generic error responses: 400 Bad Request, 401 Unauthorized, 429 Too Many Requests, 500 Internal Server Error.