Endpoints reference
Base URL: https://app.aepto.com/api/v1. Unless marked public, send Authorization: Bearer ... (API key or Connect token). Machine-readable copy: openapi-v1.yaml.
Conventions
- Paths below are relative to
https://app.aepto.com/api/v1.
{id} and {domain_id} are positive integers. {job_id} is a hex string from discovery start.
- JSON request and response bodies. Success responses include
success.
- Writes that support idempotency accept an
Idempotency-Key header (see OpenAPI).
- Errors and rate limits: Errors & rate limits.
Public (no Bearer)
| Method | Path | Description |
GET | /public/tech-stack | Anonymous tech-stack peek. Query: domain (required). Rate-limited per IP/domain. |
POST | /public/clients/ping | First-party client heartbeat (Chrome / WordPress installs). |
Account
| Method | Path | Description |
GET | /me | Current account context |
GET | /me/attention | Items needing attention |
GET | /usage | Plan / usage snapshot |
Lookup
| Method | Path | Description |
GET | /tech-stack | Authenticated tech-stack lookup |
GET | /pagespeed | PageSpeed-style metrics for a URL/domain |
Domains
| Method | Path | Description |
GET | /domains | List domains |
POST | /domains | Add a domain |
GET | /domains/{id} | Get one domain |
PATCH | /domains/{id} | Update domain fields |
DELETE | /domains/{id} | Delete domain |
POST | /domains/{id}/analyze | Re-analyze domain (uses AI credits) |
GET | /domains/folders | List folders |
POST | /domains/folders | Create folder |
PATCH | /domains/folders/{id} | Update folder |
DELETE | /domains/folders/{id} | Delete folder |
Monitors
| Method | Path | Description |
GET | /monitors | List monitors |
POST | /monitors | Create / enable a monitor |
GET | /monitors/{id} | Get monitor |
PATCH | /monitors/{id} | Update monitor |
DELETE | /monitors/{id} | Delete monitor |
POST | /monitors/{id}/check | Run check now |
GET | /monitors/{id}/uptime | Uptime summary |
GET | /monitors/{id}/history | Check history |
GET | /monitors/{id}/incidents | Incidents |
Domain Watch
| Method | Path | Description |
GET | /domain-watch | List watches |
POST | /domain-watch | Add watch |
GET | /domain-watch/{id} | Get watch |
DELETE | /domain-watch/{id} | Remove watch |
Theft Guard
| Method | Path | Description |
GET | /theft-guard | Summary |
GET | /theft-guard/alerts | Alerts |
POST | /theft-guard/{domain_id}/enable | Enable for domain |
POST | /theft-guard/{domain_id}/disable | Disable for domain |
| Method | Path | Description |
GET | /contacts | List contacts |
POST | /contacts | Add contact (verification email sent) |
PATCH | /contacts/{id} | Update contact |
DELETE | /contacts/{id} | Delete contact |
Alert webhooks
Payload shape, signature verification, and subscription fields: Alert webhooks guide.
| Method | Path | Description |
GET | /alert-webhooks | List webhooks |
POST | /alert-webhooks | Create webhook |
GET | /alert-webhooks/{id} | Get webhook |
PATCH | /alert-webhooks/{id} | Update webhook |
DELETE | /alert-webhooks/{id} | Delete webhook |
POST | /alert-webhooks/{id}/rotate-secret | Rotate signing secret |
GET | /alert-webhooks/{id}/subscriptions | List event subscriptions |
POST | /alert-webhooks/{id}/subscriptions | Add subscription |
PATCH | /alert-webhooks/subscriptions/{id} | Update subscription |
DELETE | /alert-webhooks/subscriptions/{id} | Delete subscription |
AI
| Method | Path | Description |
POST | /ai/explain-stack | Explain a domain tech stack (uses AI credits) |
POST | /ai/discovery | Start discovery job |
GET | /ai/discovery/{job_id} | Discovery job status / results |
- Connect OAuth:
https://app.aepto.com/connect/authorize, https://app.aepto.com/connect/token, https://app.aepto.com/connect/revoke — Connect
- MCP:
https://app.aepto.com/mcp - MCP
This page lists only the public Platform API. Admin and internal app routes are not documented here.
FAQ
Are paths relative or absolute?
Table paths are relative to https://app.aepto.com/api/v1. Example: GET /me means GET https://app.aepto.com/api/v1/me.
Is Connect or MCP listed in this table?
No. Connect and MCP are separate surfaces — see the related links above and Connect / MCP.
Is there a machine-readable copy?
Yes: openapi-v1.yaml.
Do AI endpoints use credits?
Yes — routes such as domain analyze and AI discovery consume AI credits on the account. Product notes: AI credits.
More answers: FAQ hub.