{ "openapi": "3.0.1", "info": { "title": "Domain Intelligence API — DNS, RDAP & SSL", "description": "Turn a list of domains into data. One row each: A, AAAA, MX, NS and TXT records, registrar, creation and expiry dates from RDAP, the TLS certificate, SPF and DMARC, plus who runs the email, DNS and hosting. No API key, no WHOIS scraping, no login.", "version": "0.1", "x-build-id": "101N0y4itZ0LtNQo7" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/insight.solutions~domain-intelligence-api/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-insight.solutions-domain-intelligence-api", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/insight.solutions~domain-intelligence-api/runs": { "post": { "operationId": "runs-sync-insight.solutions-domain-intelligence-api", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/insight.solutions~domain-intelligence-api/run-sync": { "post": { "operationId": "run-sync-insight.solutions-domain-intelligence-api", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "domains": { "title": "Domains", "type": "array", "description": "One entry per domain. Four shapes work and they can be mixed: a **bare domain** (`apify.com`), a **host with www** (`www.bbc.co.uk`), a **full URL** (`https://stripe.com/gb/pricing` — the path is ignored), or an **email address** (`sales@acme.com`), which is read as its domain. Everything reduces to the registrable domain, so a list naming one company three ways is looked up — and billed — once. IP addresses and hostnames with no TLD get a free diagnostic row instead of a request.", "items": { "type": "string" } }, "dns": { "title": "DNS records", "type": "boolean", "description": "Look the domain up in public DNS over HTTPS: **A, AAAA, MX, NS, TXT, CNAME, SOA** and the `_dmarc` TXT record — eight lookups, sent together, a few hundred bytes each. This is where `emailProvider`, `dnsProvider`, `spf`, `dmarc`, the verification records and the IP addresses come from, so leaving it on is almost always right. Two resolvers are used: Google first, Cloudflare if Google will not answer.", "default": true }, "rdap": { "title": "Registration (RDAP)", "type": "boolean", "description": "Ask the domain's registry who registered it, when, and when it expires — the modern, structured replacement for WHOIS. One request, which the bootstrap service redirects to the right registry. Some TLDs (`.io`, `.de` and others) publish no RDAP server at all; those rows come back with `registrationNote` saying so and **not** with `registered: false`, which would be a different and untrue claim.", "default": true }, "ssl": { "title": "TLS certificate", "type": "boolean", "description": "Open a TLS connection to port 443 and read the certificate the host presents: common name, every SAN, issuer, validity dates, days until expiry, protocol, serial and SHA-256 fingerprint. An **expired or mismatched certificate is reported, not refused** — that is the finding. The apex is tried first and `www.` second, and nothing but the handshake happens: no HTTP request is sent on that socket.", "default": true }, "http": { "title": "HTTP head check", "type": "boolean", "description": "One request to `https:///` (falling back to `http://`) to find out what actually answers: the final URL after redirects, the status code, the `server` header, whether HSTS is set, whether `www` is canonical, and the page ``. The body is read for the title and **nothing else** — this is not a page audit, and it is the only request that touches the website itself.", "default": true }, "maxConcurrency": { "title": "Domains in parallel", "minimum": 1, "maximum": 10, "type": "integer", "description": "How many domains are read at once. Each parallel worker keeps its own proxy session, so one refused resolver burns only its own exit IP. The default of 3 is set by RDAP: the public bootstrap service rate-limits at a few requests a second, and going faster earns 429s rather than answers. Raise it only if you have switched RDAP off.", "default": 3 }, "maxRunSecs": { "title": "Maximum run time (seconds)", "minimum": 30, "maximum": 3600, "type": "integer", "description": "Wall-clock budget for the whole run. When it is reached the Actor stops looking domains up, keeps and bills for every row it already wrote, and files a free diagnostic row for each domain it never reached. Nothing is charged for work that did not happen.", "default": 240 }, "proxyConfiguration": { "title": "Proxy configuration", "type": "object", "description": "The public resolvers, the RDAP bootstrap service and an ordinary home page all answer datacenter addresses, so the default is Apify's datacenter proxy — much cheaper than residential, and the proxy cost is already inside the per-row price. The TLS check never goes through the proxy: a certificate is presented during the handshake, so there is no request for a proxy to carry.", "default": { "useApifyProxy": true } } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }