NewScam protection for AI agents — connect the Cautellus MCP server
NewSecurity Audit Kit — audit your business in 15 minutes.$69 one-time

Developer API

Add scam detection to your app, platform, or workflow. One endpoint. Real-time results.

Pay as you go

Buy a credit pack, get your API key instantly. Every scan runs a real AI analysis, so there is no free tier — the $10 pack is the smallest way in.

Starter pack
50 scans
20¢ per scan
$10
Builder pack
275 scans
17.8¢ per scan
$49
Scale pack
1,250 scans
15.9¢ per scan
$199

One-time payment — no subscription. Your API key is issued instantly after checkout. Credits are valid for 12 months from purchase. Enter your existing key above to add credits to it and renew its credit expiry; otherwise, this purchase creates a new key.

Monthly plans

For sustained volume — cheaper per scan than pay-as-you-go. First month free. Billing starts month 2. All plans require a 6 or 12-month commitment.

Starter
5,000 scans/mo

For startups and small teams.

$79/mo
First month free
6 or 12-month contract
Business
50,000 scans/mo

For platforms and integrations.

$499/mo
First month free
6 or 12-month contract
Enterprise
Unlimited

Custom volume, SLA, and dedicated support.

Custom
First month free
Annual contract

Get your API key

Pay as you go: buy any credit pack above — your key is generated automatically and shown right after checkout.

Monthly plans and Enterprise: email support@cautellus.com with your company name and use case. We'll generate your key within 24 hours.

Quick start

1. Scan a URL

curl -X POST https://cautellus.com/api/v1/scan \
  -H "Authorization: Bearer ctl_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input": "paypal-verify-login.xyz", "type": "url"}'

2. Scan a text message

curl -X POST https://cautellus.com/api/v1/scan \
  -H "Authorization: Bearer ctl_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input": "Your package could not be delivered. Verify: bit.ly/3xScam", "type": "text"}'

3. Response

{
  "verdict": "danger",
  "score": 92,
  "summary": "This is a phishing site impersonating PayPal.",
  "flags": [
    { "label": "Brand impersonation (PayPal)", "severity": "danger" },
    { "label": "Domain registered 3 days ago", "severity": "danger" },
    { "label": "Suspicious TLD (.xyz)", "severity": "warn" }
  ],
  "meta": {
    "scansUsed": 14,
    "scansLimit": 0,
    "tier": "payg",
    "creditsRemaining": 36
  }
}

API Reference

POST/api/v1/scan

Headers

AuthorizationBearer ctl_live_YOUR_KEYRequired
Content-Typeapplication/jsonRequired

Request body

inputThe URL, text message, or email content to scanRequired
type"url" or "text". Auto-detected if omitted.Optional

Response

verdict"safe", "warn", or "danger"
score0-100 risk score
summaryPlain-English explanation
flagsArray of specific findings with severity
metaUsage info: scansUsed, scansLimit, tier, creditsRemaining

MCP server for AI agents

Give your AI agent a scam-detection guardrail. The Cautellus MCP server exposes scan_url, scan_message, and get_usage as tools your agent can call before it clicks a link, replies to a message, or moves money. Same key, same credits — each scan costs 1 credit (get_usage is free).

Endpoint

https://cautellus.com/api/mcp

Claude Code

claude mcp add --transport http cautellus https://cautellus.com/api/mcp \
  --header "Authorization: Bearer ctl_live_YOUR_KEY"

Any MCP client (JSON config)

{
  "mcpServers": {
    "cautellus": {
      "type": "http",
      "url": "https://cautellus.com/api/mcp",
      "headers": { "Authorization": "Bearer ctl_live_YOUR_KEY" }
    }
  }
}

Agent pattern: gate risky actions on the verdict — danger = don't proceed, warn = confirm with a human, safe = continue.

Error codes

401Invalid or missing API key
400Invalid request (missing input, bad JSON, input too long)
429Out of scans — monthly limit reached and no prepaid credits remain
500Internal server error

Use cases

Email providers

Scan inbound emails for phishing before they reach the inbox.

E-commerce platforms

Check seller URLs and product listings for scam indicators.

Banks & fintechs

Flag phishing texts and fake payment notifications for customers.

Messaging apps

Check links in messages before users click them.

HR & job platforms

Screen job postings for fake offer scams.

AI agents & assistants

Guardrail for autonomous agents: verify links and messages via MCP before acting on them.

Ready to integrate?

Get your API key and start scanning in minutes.

Request API Key