Developer API
Add scam detection to your app, platform, or workflow. One endpoint. Real-time results.
Pay as you go
Buy a credit pack, get your API key instantly. Every scan runs a real AI analysis, so there is no free tier — the $10 pack is the smallest way in.
One-time payment — no subscription. Your API key is issued instantly after checkout. Credits are valid for 12 months from purchase. Enter your existing key above to add credits to it and renew its credit expiry; otherwise, this purchase creates a new key.
Monthly plans
For sustained volume — cheaper per scan than pay-as-you-go. First month free. Billing starts month 2. All plans require a 6 or 12-month commitment.
For startups and small teams.
For platforms and integrations.
Custom volume, SLA, and dedicated support.
Get your API key
Pay as you go: buy any credit pack above — your key is generated automatically and shown right after checkout.
Monthly plans and Enterprise: email support@cautellus.com with your company name and use case. We'll generate your key within 24 hours.
Quick start
1. Scan a URL
curl -X POST https://cautellus.com/api/v1/scan \
-H "Authorization: Bearer ctl_live_YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"input": "paypal-verify-login.xyz", "type": "url"}'2. Scan a text message
curl -X POST https://cautellus.com/api/v1/scan \
-H "Authorization: Bearer ctl_live_YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"input": "Your package could not be delivered. Verify: bit.ly/3xScam", "type": "text"}'3. Response
{
"verdict": "danger",
"score": 92,
"summary": "This is a phishing site impersonating PayPal.",
"flags": [
{ "label": "Brand impersonation (PayPal)", "severity": "danger" },
{ "label": "Domain registered 3 days ago", "severity": "danger" },
{ "label": "Suspicious TLD (.xyz)", "severity": "warn" }
],
"meta": {
"scansUsed": 14,
"scansLimit": 0,
"tier": "payg",
"creditsRemaining": 36
}
}API Reference
/api/v1/scanHeaders
| Authorization | Bearer ctl_live_YOUR_KEY | Required |
| Content-Type | application/json | Required |
Request body
| input | The URL, text message, or email content to scan | Required |
| type | "url" or "text". Auto-detected if omitted. | Optional |
Response
| verdict | "safe", "warn", or "danger" |
| score | 0-100 risk score |
| summary | Plain-English explanation |
| flags | Array of specific findings with severity |
| meta | Usage info: scansUsed, scansLimit, tier, creditsRemaining |
MCP server for AI agents
Give your AI agent a scam-detection guardrail. The Cautellus MCP server exposes scan_url, scan_message, and get_usage as tools your agent can call before it clicks a link, replies to a message, or moves money. Same key, same credits — each scan costs 1 credit (get_usage is free).
Endpoint
https://cautellus.com/api/mcp
Claude Code
claude mcp add --transport http cautellus https://cautellus.com/api/mcp \ --header "Authorization: Bearer ctl_live_YOUR_KEY"
Any MCP client (JSON config)
{
"mcpServers": {
"cautellus": {
"type": "http",
"url": "https://cautellus.com/api/mcp",
"headers": { "Authorization": "Bearer ctl_live_YOUR_KEY" }
}
}
}Agent pattern: gate risky actions on the verdict — danger = don't proceed, warn = confirm with a human, safe = continue.
Error codes
| 401 | Invalid or missing API key |
| 400 | Invalid request (missing input, bad JSON, input too long) |
| 429 | Out of scans — monthly limit reached and no prepaid credits remain |
| 500 | Internal server error |
Use cases
Email providers
Scan inbound emails for phishing before they reach the inbox.
E-commerce platforms
Check seller URLs and product listings for scam indicators.
Banks & fintechs
Flag phishing texts and fake payment notifications for customers.
Messaging apps
Check links in messages before users click them.
HR & job platforms
Screen job postings for fake offer scams.
AI agents & assistants
Guardrail for autonomous agents: verify links and messages via MCP before acting on them.
Ready to integrate?
Get your API key and start scanning in minutes.
Request API Key