Developer API
Add scam detection to your app, platform, or workflow. One endpoint. Real-time results.
Pay as you go
Buy a credit pack, get your API key instantly. Every scan runs a real AI analysis, so there is no free tier — the $10 pack is the smallest way in.
One-time payment — no subscription. Your API key is issued instantly after checkout. Credits are valid for 12 months from purchase; buying another pack with the same email tops up the same key and resets the clock.
Monthly plans
For sustained volume — cheaper per scan than pay-as-you-go. First month free. Billing starts month 2. All plans require a 6 or 12-month commitment.
For startups and small teams.
For platforms and integrations.
Custom volume, SLA, and dedicated support.
Get your API key
Pay as you go: buy any credit pack above — your key is generated automatically and shown right after checkout.
Monthly plans and Enterprise: email support@cautellus.com with your company name and use case. We'll generate your key within 24 hours.
Quick start
1. Scan a URL
curl -X POST https://cautellus.com/api/v1/scan \
-H "Authorization: Bearer ctl_live_YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"input": "paypal-verify-login.xyz", "type": "url"}'2. Scan a text message
curl -X POST https://cautellus.com/api/v1/scan \
-H "Authorization: Bearer ctl_live_YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"input": "Your package could not be delivered. Verify: bit.ly/3xScam", "type": "text"}'3. Response
{
"verdict": "danger",
"score": 92,
"summary": "This is a phishing site impersonating PayPal.",
"flags": [
{ "label": "Brand impersonation (PayPal)", "severity": "danger" },
{ "label": "Domain registered 3 days ago", "severity": "danger" },
{ "label": "Suspicious TLD (.xyz)", "severity": "warn" }
],
"meta": {
"scansUsed": 14,
"scansLimit": 0,
"tier": "payg",
"creditsRemaining": 336
}
}API Reference
/api/v1/scanHeaders
| Authorization | Bearer ctl_live_YOUR_KEY | Required |
| Content-Type | application/json | Required |
Request body
| input | The URL, text message, or email content to scan | Required |
| type | "url" or "text". Auto-detected if omitted. | Optional |
Response
| verdict | "safe", "warn", or "danger" |
| score | 0-100 risk score |
| summary | Plain-English explanation |
| flags | Array of specific findings with severity |
| meta | Usage info: scansUsed, scansLimit, tier, creditsRemaining |
MCP server for AI agents
Give your AI agent a scam-detection guardrail. The Cautellus MCP server exposes scan_url, scan_message, and get_usage as tools your agent can call before it clicks a link, replies to a message, or moves money. Same key, same credits — each scan costs 1 credit (get_usage is free).
Endpoint
https://cautellus.com/api/mcp
Claude Code
claude mcp add --transport http cautellus https://cautellus.com/api/mcp \ --header "Authorization: Bearer ctl_live_YOUR_KEY"
Any MCP client (JSON config)
{
"mcpServers": {
"cautellus": {
"type": "http",
"url": "https://cautellus.com/api/mcp",
"headers": { "Authorization": "Bearer ctl_live_YOUR_KEY" }
}
}
}Agent pattern: gate risky actions on the verdict — danger = don't proceed, warn = confirm with a human, safe = continue.
Error codes
| 401 | Invalid or missing API key |
| 400 | Invalid request (missing input, bad JSON, input too long) |
| 429 | Out of scans — monthly limit reached and no prepaid credits remain |
| 500 | Internal server error |
Use cases
Email providers
Scan inbound emails for phishing before they reach the inbox.
E-commerce platforms
Check seller URLs and product listings for scam indicators.
Banks & fintechs
Flag phishing texts and fake payment notifications for customers.
Messaging apps
Check links in messages before users click them.
HR & job platforms
Screen job postings for fake offer scams.
AI agents & assistants
Guardrail for autonomous agents: verify links and messages via MCP before acting on them.
Ready to integrate?
Get your API key and start scanning in minutes.
Request API Key