NewSecurity Audit Kit — audit your business in 15 minutes.Launch $49· limited time offer

Developer API

Add scam detection to your app, platform, or workflow. One endpoint. Real-time results.

Pay as you go

Buy a credit pack, get your API key instantly. Every scan runs a real AI analysis, so there is no free tier — the $10 pack is the smallest way in.

Starter pack
350 scans
2.9¢ per scan
$10
Builder pack
2,000 scans
2.5¢ per scan
$49
Scale pack
10,000 scans
per scan
$199

One-time payment — no subscription. Your API key is issued instantly after checkout. Credits are valid for 12 months from purchase; buying another pack with the same email tops up the same key and resets the clock.

Monthly plans

For sustained volume — cheaper per scan than pay-as-you-go. First month free. Billing starts month 2. All plans require a 6 or 12-month commitment.

Starter
5,000 scans/mo

For startups and small teams.

$79/mo
First month free
6 or 12-month contract
Business
50,000 scans/mo

For platforms and integrations.

$499/mo
First month free
6 or 12-month contract
Enterprise
Unlimited

Custom volume, SLA, and dedicated support.

Custom
First month free
Annual contract

Get your API key

Pay as you go: buy any credit pack above — your key is generated automatically and shown right after checkout.

Monthly plans and Enterprise: email support@cautellus.com with your company name and use case. We'll generate your key within 24 hours.

Quick start

1. Scan a URL

curl -X POST https://cautellus.com/api/v1/scan \
  -H "Authorization: Bearer ctl_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input": "paypal-verify-login.xyz", "type": "url"}'

2. Scan a text message

curl -X POST https://cautellus.com/api/v1/scan \
  -H "Authorization: Bearer ctl_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input": "Your package could not be delivered. Verify: bit.ly/3xScam", "type": "text"}'

3. Response

{
  "verdict": "danger",
  "score": 92,
  "summary": "This is a phishing site impersonating PayPal.",
  "flags": [
    { "label": "Brand impersonation (PayPal)", "severity": "danger" },
    { "label": "Domain registered 3 days ago", "severity": "danger" },
    { "label": "Suspicious TLD (.xyz)", "severity": "warn" }
  ],
  "meta": {
    "scansUsed": 14,
    "scansLimit": 0,
    "tier": "payg",
    "creditsRemaining": 336
  }
}

API Reference

POST/api/v1/scan

Headers

AuthorizationBearer ctl_live_YOUR_KEYRequired
Content-Typeapplication/jsonRequired

Request body

inputThe URL, text message, or email content to scanRequired
type"url" or "text". Auto-detected if omitted.Optional

Response

verdict"safe", "warn", or "danger"
score0-100 risk score
summaryPlain-English explanation
flagsArray of specific findings with severity
metaUsage info: scansUsed, scansLimit, tier, creditsRemaining

MCP server for AI agents

Give your AI agent a scam-detection guardrail. The Cautellus MCP server exposes scan_url, scan_message, and get_usage as tools your agent can call before it clicks a link, replies to a message, or moves money. Same key, same credits — each scan costs 1 credit (get_usage is free).

Endpoint

https://cautellus.com/api/mcp

Claude Code

claude mcp add --transport http cautellus https://cautellus.com/api/mcp \
  --header "Authorization: Bearer ctl_live_YOUR_KEY"

Any MCP client (JSON config)

{
  "mcpServers": {
    "cautellus": {
      "type": "http",
      "url": "https://cautellus.com/api/mcp",
      "headers": { "Authorization": "Bearer ctl_live_YOUR_KEY" }
    }
  }
}

Agent pattern: gate risky actions on the verdict — danger = don't proceed, warn = confirm with a human, safe = continue.

Error codes

401Invalid or missing API key
400Invalid request (missing input, bad JSON, input too long)
429Out of scans — monthly limit reached and no prepaid credits remain
500Internal server error

Use cases

Email providers

Scan inbound emails for phishing before they reach the inbox.

E-commerce platforms

Check seller URLs and product listings for scam indicators.

Banks & fintechs

Flag phishing texts and fake payment notifications for customers.

Messaging apps

Check links in messages before users click them.

HR & job platforms

Screen job postings for fake offer scams.

AI agents & assistants

Guardrail for autonomous agents: verify links and messages via MCP before acting on them.

Ready to integrate?

Get your API key and start scanning in minutes.

Request API Key