API Documentation

# The DseWiki incident's edit URL — denied by the wiki_edit pattern rule,
# on any domain, whether or not the database has a row for it:
curl -H "X-API-Key: YOUR_API_KEY" \
     "https://www.aiagentallowlist.com/api/check?url=https%3A%2F%2Fwww.wikiservice.at%2Fdse%2Fwiki.cgi%3Faction%3Dedit%26id%3DSandKasten"

#  → "verdict": "deny", "matched": {"layer": "rules", "id": "wiki_edit", ...}

# The Hugging Face incident's entry vector (dataset upload) — denied by the database's verified upload URL:
curl -H "X-API-Key: YOUR_API_KEY" \
     "https://www.aiagentallowlist.com/api/check?url=https%3A%2F%2Fhuggingface.co%2Fnew-dataset"

#  → "verdict": "deny", "matched": {"layer": "page_type_db", "id": "upload", ...}

# Recommended: header authentication
curl -H "X-API-Key: YOUR_API_KEY" \
     "https://www.aiagentallowlist.com/api/check?url=stripe.com"

# Alternative: query-parameter authentication
curl "https://www.aiagentallowlist.com/api/check?url=stripe.com&api_key=YOUR_API_KEY"

# Bare domain
curl -H "X-API-Key: $AAL_API_KEY" \
     "https://www.aiagentallowlist.com/api/check?url=stripe.com"

# Full URL — let curl handle the encoding with --data-urlencode + -G
curl -G -H "X-API-Key: $AAL_API_KEY" \
     --data-urlencode "url=https://dashboard.stripe.com/login" \
     "https://www.aiagentallowlist.com/api/check"

import os
import requests

API_URL = "https://www.aiagentallowlist.com/api/check"
HEADERS = {"X-API-Key": os.environ["AAL_API_KEY"]}

def check_domain(domain):
    # `domain` may be a bare domain or a full URL — the API normalizes it
    resp = requests.get(API_URL, headers=HEADERS,
                        params={"domain": domain}, timeout=10)
    if resp.status_code == 429 or resp.status_code == 503:
        raise RuntimeError(f"Transient error {resp.status_code} — retry with backoff")
    resp.raise_for_status()
    return resp.json()

record = check_domain("https://dashboard.stripe.com/login")
if record["found"]:
    login_url = record["page_types"].get("login")
    print(f"login page: {login_url}, quota left: {record['quota_remaining']}")
else:
    print("unclassified domain — default-deny candidate")

const API_URL = "https://www.aiagentallowlist.com/api/check";

async function checkUrl(target) {
  const url = `${API_URL}?url=${encodeURIComponent(target)}`;
  const res = await fetch(url, {
    headers: { "X-API-Key": process.env.AAL_API_KEY }
  });
  if (res.status === 429 || res.status === 503) {
    throw new Error(`Transient error ${res.status} — retry with backoff`);
  }
  if (!res.ok) throw new Error(`API error ${res.status}`);
  return res.json();
}

const record = await checkDomain("https://dashboard.stripe.com/login");
if (record.found) {
  console.log("login page:", record.page_types.login ?? "none on this domain");
  console.log("quota left:", record.quota_remaining);
} else {
  console.log("unclassified domain — default-deny candidate");
}

<?php
function check_domain($domain) {
    $url = 'https://www.aiagentallowlist.com/api/check?url=' . urlencode($domain);
    $ch  = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 10,
        CURLOPT_HTTPHEADER     => ['X-API-Key: ' . getenv('AAL_API_KEY')],
    ]);
    $body   = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
    curl_close($ch);

    if ($status === 429 || $status === 503) {
        throw new RuntimeException("Transient error $status — retry with backoff");
    }
    if ($status !== 200) {
        throw new RuntimeException("API error $status: $body");
    }
    return json_decode($body, true);
}

$record = check_domain('https://dashboard.stripe.com/login');
if ($record['found']) {
    echo 'login page: ', $record['page_types']['login'] ?? 'none on this domain', PHP_EOL;
    echo 'quota left: ', $record['quota_remaining'], PHP_EOL;
} else {
    echo 'unclassified domain — default-deny candidate', PHP_EOL;
}