Security
Know the limits. Build further.

Google Keep API (googleapis.com) ↗

OpenAPI-specified service (googleapis.com:keep, version v1): The Google Keep API is used in an enterprise environment to manage Google Keep content and resolve issues identified by cloud security software.

Google OAuth2 API (googleapis.com) ↗

OpenAPI-specified service (googleapis.com:oauth2, version v2): Obtains end-user authorization grants for use with other Google APIs.

Google Safe Browse ↗

Google Safe Browse (Anti-Malware): Google Link/Domain Flagging

GreyNoise ↗

Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data

HTTPS: Yes

HackerOne ↗

The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting

HTTPS: Yes

Hashable ↗

A REST API to access high level cryptographic functions and methods

HTTPS: Yes · CORS: Yes

hashlookup CIRCL API ↗

OpenAPI-specified web service (circl.lu, version 1.2):  CIRCL hash lookup is a public API to lookup hash values against known database of files. For more details about all the datasets included visit the website of the project. The API is accessible via HTTP ReST API and the API is also described as an OpenAPI. A docume

hashlookup CIRCL API (circl.lu) ↗

OpenAPI-specified service (circl.lu:hashlookup, version 1.2):  CIRCL hash lookup is a public API to lookup hash values against known database of files. For more details about all the datasets included visit the website of the project. The API is accessible via HTTP ReST API and the API is also described as an OpenAPI. A docume

Have I Been Pwned ↗

Breach checks and a separate service for exposed password hashes.

HaveIBeenPwned ↗

Passwords which have previously been exposed in data breaches

HTTPS: Yes

Hotel Booking — amadeus-hotel-booking (amadeus.com) ↗

OpenAPI-specified service (amadeus.com:amadeus-hotel-booking, version 1.1.3): Before using this API, we recommend you read our **Authorization Guide** for more information on how to generate an access token. Please also be aware that our test environment is based on a subset of the production for this API it may change dynamically. For your tests, use big cities like LON (London) or NYC (New-Yor

Hotel Name Autocomplete — amadeus-hotel-name-autocomplete (amadeus.com) ↗

OpenAPI-specified service (amadeus.com:amadeus-hotel-name-autocomplete, version 1.0.3): Before using this API, we recommend you read our **Authorization Guide** for more information on how to generate an access token. Please also be aware that our test environment is based on a subset of the production for this API it may change dynamically. For your tests, use big cities like LON (London) or NYC (New-Yor

Hotel Ratings — amadeus-hotel-ratings (amadeus.com) ↗

OpenAPI-specified service (amadeus.com:amadeus-hotel-ratings, version 1.0.2): Before using this API, we recommend you read our **Authorization Guide** for more information on how to generate an access token. Please also be aware that our test environment is based on a subset of the production, this API in test only offers 24 hotels; 10 in London and 14 in New-York. You can find the list in our *

Hotel Search API — amadeus-hotel-search (amadeus.com) ↗

OpenAPI-specified service (amadeus.com:amadeus-hotel-search, version 3.0.8): Before using this API, we recommend you read our **Authorization Guide** for more information on how to generate an access token. Please also be aware that our test environment is based on a subset of the production for this API it may change dynamically. For your tests, use big cities like LON (London) or NYC (New-Yor

Hubhopper Partner Integration API(s) - Production ↗

OpenAPI-specified web service (hubhopper.com, version v5): This is an interactive document explaining the API(s) that could be used to fetch data from Hubhopper. Use the api key provided to authorize `x-api-key` and test the API(s). The output data models are also available for reference.

Hybrid Analysis ↗

File and URL malware analysis powered by Falcon Sandbox

HTTPS: Yes

Identity and Access Management (IAM) API (googleapis.com) ↗

OpenAPI-specified service (googleapis.com:iam, version v2): Manages identity and access control for Google Cloud Platform resources, including the creation of service accounts, which you can use to authenticate to Google and make API calls.

Identity API — commerce-identity (apiz.ebay.com) ↗

OpenAPI-specified service (apiz.ebay.com:commerce-identity, version v1.1.0): Note: Not all the account related fields are returned for an authenticated user. The fields returned in the response are controlled by the scopes and are available only to select developers approved by business units. Retrieves the authenticated user's account profile information. It can be used to let users log into y

Identity API (apiz.ebay.com) ↗

OpenAPI-specified web service (apiz.ebay.com, version v1.1.0): Note: Not all the account related fields are returned for an authenticated user. The fields returned in the response are controlled by the scopes and are available only to select developers approved by business units. Retrieves the authenticated user's account profile information. It can be used to let users log into y

Identity Toolkit API — identitytoolkit (googleapis.com) ↗

OpenAPI-specified service (googleapis.com:identitytoolkit, version v2): The Google Identity Toolkit API lets you use open standards to verify a user's identity.

Influx OSS API Service (influxdata.com) ↗

OpenAPI-specified web service (influxdata.com, version 2.0.0): # Authentication <!-- ReDoc-Inject: <security-definitions> -->

Instagram API ↗

OpenAPI-specified web service (instagram.com, version 1.0.0): Description of Instagram RESTful API. Current limitations: * Instagram service does not support cross origin headers for security reasons, therefore it is not possible to use Swagger UI and make API calls directly from browser. * Modification API requests (`POST`, `DELETE`) require additional security scopes that are a

Intel Product Catalogue Service ↗

OpenAPI-specified web service (intel.com, version 0.1.0): This is the documentation for PIM Micro services. In order to use this tool you need to have Basic Auth credentials and a client id. If you dont have one, please make sure to request one by sending an email to the PIM MS team: pim.360.team@intel.com

Intel Product Catalogue Service — product-catalogue (intel.com) ↗

OpenAPI-specified service (intel.com:product-catalogue, version 0.1.0): This is the documentation for PIM Micro services. In order to use this tool you need to have Basic Auth credentials and a client id. If you dont have one, please make sure to request one by sending an email to the PIM MS team: pim.360.team@intel.com

Intelligence X ↗

Perform OSINT via Intelligence X

HTTPS: Yes

IoTVAS API (firmalyzer.com) ↗

OpenAPI-specified web service (firmalyzer.com, version 1.0): IOTVAS API enables you to discover IoT/Connected devices in the network and provides detailed real-time risk analysis, including firmware vulnerability analysis without requiring the user to upload the firmware file. Please visit the signup page to create an API key. IoTVAS API can be easily integrated with vulnerabili

IP Geolocation API (bigdatacloud.net) ↗

OpenAPI-specified web service (bigdatacloud.net, version 1.0.0): BigDataCloud's IP Geolocation API returns detailed information about the geographical location, ownership and connectivity of the provided IPv4 IP address. This API is powered by patent-pending ‘Next Generation IP Geolocation Technology'. As a result, the API has sub-millisecond response time. You can authenticate the

IPASIS ↗

IPASIS (Fraud Prevention): Real-time bot detection and fraud prevention API combining IP reputation, proxy/VPN detection, and email validation in a single call

IPGuardian ↗

Check IP addresses against 140+ public threat intelligence blocklists

HTTPS: Yes · CORS: Yes

IPLogs ↗

Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing

HTTPS: Yes · CORS: Yes

IPScanner ↗

IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score

HTTPS: Yes · CORS: Yes

isMalicious ↗

Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups

HTTPS: Yes · CORS: No

IX-API ↗

OpenAPI-specified web service (ix-api.net, version 2.1.0): This API allows to config/change/delete Internet Exchange services. # Filters When querying collections, the provided query parameters are validated. Unknown query parameters are ignored. Providing invalid filter values should yield a validation error.

Jumio ↗

Jumio (Fraud Prevention): Provides identity verification, KYC (Know Your Customer), and AML (Anti-Money Laundering) solutions, including document verification and biometric authentication

Jumpseller API ↗

OpenAPI-specified web service (jumpseller.com, version 1.0.0): # Endpoint Structure All URLs are in the format: ```text https://api.jumpseller.com/v1/path.json?login=XXXXXX&authtoken=storetoken ``` The path is prefixed by the API version and the URL takes as parameters the login (your store specific API login) and your authentication token. *** # Version The current version of the

Just Eat UK (just-eat.co.uk) ↗

OpenAPI-specified web service (just-eat.co.uk, version 1.0.0): # Just Eat API Just Eat offers services for our various business partners and our consumer applications. How you interact with the API depends on the services you wish to interact with. ## Security ### HTTPS All api calls and callbacks require HTTPS. Your service will need a valid SSL certificate and be accessible via

Kiprio Email Validation ↗

Kiprio Email Validation (Data Validation): Email address validation with MX, disposable, role and typo detection

Kiprio SSL Inspector ↗

Kiprio SSL Inspector (Security): TLS certificate analysis with protocol matrix, cipher suite and HSTS grading

KumpeApps API ↗

OpenAPI-specified web service (kumpeapps.com, version 5.0.0): KKid API. Due to security concerns all calls to this API requires authentication. If you have access then you may use your KumpeApps username/password to authenticate. To gain access please use the contact developer link below.

Labs64 NetLicensing RESTful API Test Center ↗

OpenAPI-specified web service (netlicensing.io, version 2.x): The Labs64 NetLicensing RESTful API gives you access to NetLicensing’s core features. Authentication You authenticate to the NetLicensing API by providing your account credentials or simply use our demo account - demo:demo Find out more about Labs64 NetLicensing at netlicensing.io

languagelayer ↗

languagelayer (Data Validation): Language detection

Legal Entity Management API — LegalEntityService (adyen.com) ↗

OpenAPI-specified service (adyen.com:LegalEntityService, version 3): The Legal Entity Management API enables you to manage legal entities that contain information required for verification. ## Authentication To connect to the Legal Entity Management API, you must use the basic authentication credentials of your web service user. If you don't have one, contact the Adyen Support Team. Use

link.fish API ↗

OpenAPI-specified web service (link.fish, version 2018-07-05): API to easily extract data from websites. # Base URL All URLs referenced in the documentation have the following base: ``` https://api.link.fish ``` The REST API is only served over HTTPS. To ensure data privacy, unencrypted HTTP is not supported. # Authentication HTTP requests to the REST API are protected with HTTP B

Location Score — amadeus-location-score (amadeus.com) ↗

OpenAPI-specified service (amadeus.com:amadeus-location-score, version 1.0.2): Before using this API, we recommend you read our **Authorization Guide** for more information on how to generate an access token. Please also be aware that our test environment is based on a subset of the production, this API in test only returns a few selected cities. You can find the list in our **data collection**.

LoginRadius ↗

Managed User Authentication Service

HTTPS: Yes · CORS: Yes

mailboxlayer ↗

mailboxlayer (Data Validation): Email address validation

ManagedServiceIdentityClient — msi-ManagedIdentity (azure.com) ↗

OpenAPI-specified service (azure.com:msi-ManagedIdentity, version 2018-11-30): The Managed Service Identity Client.

Management API — ManagementService (adyen.com) ↗

OpenAPI-specified service (adyen.com:ManagementService, version 1): Configure and manage your Adyen company and merchant accounts, stores, and payment terminals. ## Authentication Each request to the Management API must be signed with an API key. Generate your API key in the Customer Area and then set this key to the `X-API-Key` header value. To access the live endpoints, you need to g

MariaDBManagementClient — mariadb-DataEncryptionKeys (azure.com) ↗

OpenAPI-specified service (azure.com:mariadb-DataEncryptionKeys, version 2020-01-01-privatepreview): The Microsoft Azure management API provides create, read, update, and delete functionality for Azure MariaDB resources including servers, databases, firewall rules, VNET rules, security alert policies, log files, encryption keys, active directory administrator and configurations.

MariaDBManagementClient — mariadb-PrivateEndpointConnections (azure.com) ↗

OpenAPI-specified service (azure.com:mariadb-PrivateEndpointConnections, version 2018-06-01-privatepreview): The Microsoft Azure management API provides create, read, update, and delete functionality for Azure MariaDB resources including servers, databases, firewall rules, VNET rules, security alert policies, log files and configurations with new business model.