API Guide

What Is the Cyber Craft Solutions API?

Our API empowers you to integrate industry-leading security checks, vulnerability scans, and secrets detection right into your own apps, scripts, and automation workflows. With our easy-to-use API, you can:

  • Automatically scan code, files, or repos for secrets and sensitive info leaks
  • Check domains, endpoints, and infrastructure for vulnerabilities
  • Integrate findings directly into your own dashboards or alerts
  • Save time and reduce risk by automating repetitive security tasks

Whether you’re a developer, IT professional, or business owner, the CraftedCyber API puts enterprise-grade security tools at your fingertips—no bloat, no sales calls, no hassle.

Frequently Asked Questions (API FAQ)

Q: How do I get an API key?
A: Sign up here, verify your email, and your API key will be shown and emailed to you instantly.

Q: Is the API really free?
A: Yes! We offer a free tier so you can start securing your assets right away. For larger files, higher volumes, or developer features, contact us for options.

Q: What can I do with the API?
A:

  • Scan files, code, or git repos for secrets (API tokens, credentials, etc.)
  • Run passive security checks on domains and endpoints
  • Integrate with your CI/CD pipeline to check risky code
  • Schedule or trigger scans on demand

Q: How do I use my API key?
A: Include your API key in the request headers as Authorization: Bearer YOUR_API_KEY.

Example:
File:
curl.exe -X POST "https://api.craftedcybersolutions.com/scan" -H "access-token: <API TOKEN>" -F "file=@C:\example_secrets.py"

URL (single files):
curl.exe -X POST "https://api.craftedcybersolutions.com/scan-url?url=https://raw.githubusercontent.com/User123//main/web/django/settings.py" -H "access-token: <API TOKEN>"

Github Repo URL:
curl.exe -X POST "https://api.craftedcybersolutions.com/scan-github-repo?repo_url=https://github.com/User123/main" -H "access-token: <API TOKEN>"

You will get a JSON response with any secrets found.

Q: Is there a usage limit?
A: The free tier includes generous usage, suitable for small teams and solo devs. Tokens or subscriptions beyond the free limits are available.

Q: How do I reset or replace my API key?
A: If you lose your key or think it was exposed, contact us and we’ll quickly reset it for you.

Q: What languages or platforms are supported?
A: Our API is platform-agnostic: use it with Python, Bash, PowerShell, JavaScript, or any tool that can make HTTPS requests.

Q: What endpoints are available?
A:

  • /scan — scan for secrets in uploaded files or text
  • /recon — perform passive security recon on domains
  • (More endpoints coming soon! Check back for updates.)

Q: Is my data safe?
A: Absolutely. We never store files or scan results longer than necessary. Your data and privacy are top priority.

Q: Can I get help or see example scripts?
A: Yes! Check our GitHub examples (coming soon) or reach out for quick start templates.

Need Help?

If your question isn’t answered here, just contact us — we respond fast!