API for stores and businesses

The same checks as the site, straight from your system: before you accept an order, pay a supplier, or allow a link on your platform.

Getting a key

Email us at support@allsitey.com with your company name and how many checks you need per day. The key is shown once, so store it safely and never put it in front-end code.

Request

POST /api/v1/check with the key in the Authorization: Bearer header.

  • target: a link, domain, IBAN, phone number, email or social handle (up to 2048 characters).
  • text: instead of target, a full message we match against scam patterns and whose links we check (up to 2000 characters).
  • lang: ar or en for the language of the reasons (optional).
curl -X POST https://allsitey.com/api/v1/check \
  -H "Authorization: Bearer alls_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"target": "example-store.com", "lang": "ar"}'

Response

The verdict is one of: fraud, suspicious, trusted (no danger signs found), neutral, unknown, each with its reasons. IBANs, numbers, emails and handles never come back as trusted, because we can't verify who owns them.

{
  "target": "example-store.com",
  "verdict": {
    "verdict": "suspicious",
    "risk": 55,
    "trust": 45,
    "reasons": ["…"]
  },
  "results": [ { "investigator": "domain_age", "verdict": "suspicious", "risk": 50, "reason": "…" } ],
  "remaining": 487
}

Errors and limits

  • 401 invalid_key
  • 400 bad_request
  • 413 too_large
  • 422 invalid target
  • 429 quota · daily limit per key (resets at midnight, Riyadh time)

A check usually takes 2 to 15 seconds depending on the site, so set your request timeout to at least 60 seconds. We don't store the links or text you send; we only count checks per key.