API Integration Guide

1. Authentication

Requests are authenticated with an API key. Create one from your account dashboard — you'll get a key that looks like co_live_…. Keep it secret; it's shown only once.

Send the key on every request using the x-api-key header:

x-api-key: co_live_your_key_here

2. Making requests

Every endpoint takes a url query parameter — the target site to analyse. Here's the same SSL check in three languages:

cURL

curl "https://crewosintapi.aibachkhoa.com/api/ssl?url=example.com" \
  -H "x-api-key: co_live_your_key_here"

JavaScript (fetch)

const res = await fetch(
  "https://crewosintapi.aibachkhoa.com/api/tech-stack?url=github.com",
  { headers: { "x-api-key": process.env.CREWOSINT_KEY } }
);
const data = await res.json();
console.log(data);

Python (requests)

import os, requests

resp = requests.get(
    "https://crewosintapi.aibachkhoa.com/api/dns",
    params={"url": "example.com"},
    headers={"x-api-key": os.environ["CREWOSINT_KEY"]},
)
print(resp.json())

3. Metering & credits

Pricing is pay-as-you-go: your account holds a balance of request credits. When you call the API with your key, each successful request consumes one credit.

• New accounts start with 100 free credits.
• Only successful responses (HTTP < 400) are charged — timeouts and errors are free.
• Requests without a key are not charged (free public tier, rate-limited by IP).
• When your balance hits zero, keyed requests return 402 Payment Required.
• Buy more credits anytime from the dashboard — no subscription.

Check your remaining balance and usage programmatically:

curl https://crewosintapi.aibachkhoa.com/api/account/usage \
  -H "Authorization: Bearer YOUR_SESSION_JWT"

4. Status codes

5. Endpoints

A selection of the available checks — see the full OpenAPI spec for all of them.

6. MCP (AI agents)

CrewOSINT ships an MCP server that exposes every check as a tool for AI agents. Step-by-step setup for Claude Desktop, Cursor and VS Code now lives on its own page.