{
  "openapi": "3.0.1",
  "info": {
    "title": "Domain Security Scanner",
    "description": "Scan domains for malware, phishing, crypto scams, botnet C2, blacklist signals, HTTPS weaknesses, and reputation issues across multiple threat-intelligence sources. Returns verdicts, a security score, positive signals, and explicit source coverage. Optional API keys unlock account-only providers.",
    "version": "0.2",
    "x-build-id": "uDiRRMRqKRCc2cX9n"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/trovevault~domain-security-scanner/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-trovevault-domain-security-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/trovevault~domain-security-scanner/runs": {
      "post": {
        "operationId": "runs-sync-trovevault-domain-security-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/trovevault~domain-security-scanner/run-sync": {
      "post": {
        "operationId": "run-sync-trovevault-domain-security-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "required": [
          "domains"
        ],
        "properties": {
          "domains": {
            "title": "Domains to scan",
            "maxItems": 500,
            "type": "array",
            "description": "Domains to check for active malware, phishing, scam, botnet, community-report, and blacklist signals. URLs are accepted and normalized to their hostname. Each run supports up to 500 unique domains.",
            "items": {
              "type": "string"
            }
          },
          "urlscanApiKey": {
            "title": "urlscan.io API key (optional)",
            "type": "string",
            "description": "Adds verdict retrieval for recent archived urlscan.io scans. Without a key, the actor can report scan presence but cannot retrieve verdict details. Both free-account and commercial keys are supported."
          },
          "abuseChAuthKey": {
            "title": "abuse.ch Auth-Key (optional)",
            "type": "string",
            "description": "Activates URLHaus and ThreatFox lookups. Both services now require an abuse.ch Auth-Key; free community and commercial keys are supported subject to abuse.ch terms."
          },
          "otxApiKey": {
            "title": "AlienVault OTX API key (optional)",
            "type": "string",
            "description": "Improves OTX request quotas for community pulse lookups. Omit it to use OTX's public lookup access."
          },
          "phishStatsApiKey": {
            "title": "PhishStats API key (optional)",
            "type": "string",
            "description": "Raises the PhishStats daily quota from anonymous access to your registered or commercial plan allowance. Send the psk_ key created in PhishStats settings."
          },
          "triageApiKey": {
            "title": "Recorded Future Triage API key (optional)",
            "type": "string",
            "description": "Activates read-only Triage search for domains extracted from malware sandbox analyses in the last year. The actor never submits URLs or files to the sandbox."
          },
          "threatCatApiKey": {
            "title": "ThreatCat timed feed key (optional)",
            "type": "string",
            "description": "Activates ThreatCat domain-feed matching for the feeds allowed by your timed download key. The actor respects the documented one-request-per-second limit."
          },
          "mispInstanceUrl": {
            "title": "MISP instance URL (optional)",
            "type": "string",
            "description": "HTTPS base URL of a MISP instance whose ingested attributes should be searched, for example https://misp.security-team.example. Use it with a MISP API key. This supports MISP default feeds after your instance has fetched them."
          },
          "mispApiKey": {
            "title": "MISP API key (optional)",
            "type": "string",
            "description": "Read-only authentication key for the MISP instance URL. Both values are required to activate MISP attribute searches."
          },
          "virusTotalApiKey": {
            "title": "VirusTotal API key (optional)",
            "type": "string",
            "description": "Adds VirusTotal domain analysis and engine verdict counts. Free and commercial API keys are supported; your VirusTotal plan controls quotas and permitted use."
          },
          "safeBrowsingApiKey": {
            "title": "Google Safe Browsing API key (optional)",
            "type": "string",
            "description": "Adds Google's malware and social-engineering URL matches for both HTTP and HTTPS versions of each domain."
          },
          "datasetId": {
            "title": "Additional dataset ID (optional)",
            "type": "string",
            "description": "Push each result to an existing Apify dataset as well as the run's default dataset. Use this to combine scheduled runs or feed a downstream actor."
          },
          "runId": {
            "title": "Pipeline run ID (optional)",
            "type": "string",
            "description": "Correlation value copied to every output row so downstream systems can associate results with a wider workflow."
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}