{"uid":"cap_YHvTmmGXc51XvXVq-WVKC","slug":"webscan-ai-website-preflight-efdc4212","name":"Webscan AI Website Preflight","description":"Website reconnaissance for AI agents: DNS/TLS, redirects, access paths, bot/JavaScript detection, metadata, technologies, security headers, robots, sitemaps and API discovery, with timestamps and content hashes. Plan crawling, integrations and technical audits from one request. Guide & examples: https://api.webscan-ai.online/guide/","url":"https://api.webscan-ai.online/v1/website-preflight","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"url":{"type":"string","format":"uri","description":"Public HTTP(S) website URL to inspect"},"freshness_seconds":{"type":"integer","default":3600,"maximum":86400,"minimum":0}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VEGKb2R-K3LHv13vojYbc","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs deterministic, multi-dimensional website intelligence analysis on a public URL, returning DNS, TLS, security headers, redirect chains, robots/sitemaps, HTML metadata, technologies, and bot-detection signals as structured JSON.","exampleAgentPrompt":"Run a full preflight scan on https://example.com — I want to see its DNS setup, TLS cert, security headers, whether it has an llms.txt or OpenAPI spec, what technologies it uses, and whether it blocks bots, using a freshness window of 3600 seconds.","exampleUseCases":[{"title":"Pre-scrape website compatibility check","prompt":"Before I try to scrape data from https://shop.acme.com, can you do a preflight scan to check if it blocks bots, requires JavaScript, has any tricky redirects, and what its robots.txt says? Use a 1-hour freshness window."},{"title":"Security posture audit for a vendor","prompt":"I need to quickly assess the security posture of https://vendor-portal.io — check their TLS certificate, DNS setup, and whether they have proper security headers like HSTS, CSP, and X-Frame-Options set."},{"title":"AI-readiness discovery for a website","prompt":"Does https://docs.myservice.dev expose an llms.txt file, an OpenAPI spec, or any JSON-LD structured data? Run a preflight check on it so I know how agent-friendly it is."}],"resultDescription":"A JSON object covering: DNS records and resolution, TLS certificate validity and chain details, HTTP redirect hops, compression methods supported, security headers present (HSTS, CSP, X-Frame-Options, etc.), robots.txt and sitemap contents and URLs, llms.txt presence, OpenAPI spec discovery, HTML title/meta/Open Graph tags, JSON-LD structured data, detected technology stack, bot and JavaScript detection signals, accessible URL paths, content hashes, and explicit capability limitations. All results are deterministic with no LLM inference involved.","failureModes":["URL is not publicly reachable — returns error with DNS or connection failure detail","Invalid or non-HTTP(S) URL format — schema validation error before request is sent","Site returns non-200 status or blocks the scanner — partial results returned with noted access failures","freshness_seconds of 0 forces a fresh fetch which may time out on slow sites","TLS certificate is invalid or expired — flagged in response but scan may still complete partially","Site uses heavy JS rendering — JS-dependent content will be flagged as unresolved"],"whenToPreferThis":"Use this endpoint when an AI agent needs a structured, deterministic snapshot of a website's technical properties before interacting with, scraping, or integrating it — especially when you need security header audits, bot-detection awareness, llms.txt/OpenAPI discovery, or DNS/TLS verification without invoking an LLM. Prefer it over general web scrapers when you need structured intelligence rather than raw page content, and over manual curl/dig checks when you need all signals in one consolidated JSON response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:30:28.054Z","isFirstParty":false}