API reference · Prolectio

Authentication

No API key is required. Every v1 endpoint is public and read-only — send a plain GET with any HTTP client. There is no signup, token, or OAuth flow to complete:

curl "https://prolectio.com/api/v1/score?domain=prolectio.com"

Rate limits

30 requests per 5 minutes per IP, across all v1 endpoints. Exceeding the limit returns 429 with a Retry-After header (300 seconds). Back off exponentially on 429.

GET /api/v1/score

The public Prolectio Score for a domain, with a link to its full report.

curl "https://prolectio.com/api/v1/score?domain=prolectio.com"

{
  "domain": "prolectio.com",
  "score": 73,
  "band": "amber",
  "scannedAt": "2026-08-20T22:04:52.109Z",
  "reportUrl": "https://prolectio.com/s/dogfoodP20"
}

domain (query, required) — the apex or docs domain to look up. 404 when no public score exists yet; run a free scan to create one.

GET /api/v1/report

The full public scan report for a domain — the same data the public report page renders: per-category scores, per-page findings, and provenance.

curl "https://prolectio.com/api/v1/report?domain=prolectio.com"

domain (query, required). Responses can be large; the shape is documented in the OpenAPI spec.

GET /api/v1/index

The AX Index distribution — rubric version, scan date, row count, and band counts.

curl "https://prolectio.com/api/v1/index"

{
  "axRubricVersion": "v0.2",
  "scannedAt": "2026-08-12T09:31:49.836Z",
  "rowCount": 191,
  "leaders": [],
  "distribution": { "total": 191, "green": 0, "amber": 162, "red": 29, "median": 59 }
}

Errors & conduct