For developers

Xpensiv API.

Create an API key in your account. Send it as a Bearer token. Keys are stored as hashes and shown only once.

Run a check

curl -X POST https://YOUR_HOST/api/v1/checks \
  -H 'Authorization: Bearer xpk_YOUR_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"url":"https://example.com"}'

Poll status

curl https://YOUR_HOST/api/v1/checks/CHECK_ID \
  -H 'Authorization: Bearer xpk_YOUR_KEY'

Get findings

curl https://YOUR_HOST/api/v1/checks/CHECK_ID/result \
  -H 'Authorization: Bearer xpk_YOUR_KEY'

POST returns HTTP 202 with an ID. Status is queued, running, completed or failed. Result JSON includes verdict, findings (region, severity, evidence, fix and prompt), screenshots and Lighthouse scores. Requests are rate limited and subject to account audit quota.

MCP endpoint

Streamable HTTP endpoint: https://YOUR_HOST/mcp. Tools: run_design_check, get_result and list_checks. OAuth metadata is at /.well-known/oauth-authorization-server. Developer clients may authenticate with an API key.

Manage API keys and tool connections