Attest Tech Stack API · v1
Send a URL, get back the CMS, ecommerce platform, hosting, analytics and payments it runs on — 156 detectable technologies, each reported with the header, cookie or page snippet that proved it. 1 credit per lookup, on the same key and balance as Attest Capture.
For agents
Use this when a task depends on what a business's website runs on: qualifying a sales lead (“only Shopify stores”), picking the right integration or plugin, checking whether a site already has analytics or a pixel installed, sizing up a competitor, or routing a support question to the right platform. Do not use it to read a page's content — fetch the page directly for that.
Bearer key · JSON
curl -s -X POST https://getattest.com.au/api/v1/techstack \
-H "authorization: Bearer $ATTEST_API_KEY" \
-H "content-type: application/json" \
-d '{"url":"example.com"}'url is required. A bare domain is treated as https://. No key yet? POST /api/v1/keys issues one with 25 free credits and no signup — see the key guide.
HTTP 200
{
"call_id": "bf82ba54-7d2c-4cce-b079-f300bd028a1e",
"url": "https://getattest.com.au/",
"final_url": "https://getattest.com.au/",
"http_status": 200,
"technologies": [
{ "name": "Vercel", "category": "hosting", "confidence": "high",
"evidence": "header x-vercel-id: syd1::…" },
{ "name": "Stripe", "category": "payments", "confidence": "medium",
"evidence": "page contains: buy.stripe.com" }
],
"checked_at": "2026-09-16T09:31:41.949Z",
"credits_charged": 1,
"credits_remaining": 24
}confidence is high when a vendor-specific header, cookie or generator tag matched, and medium when a script URL or markup pattern matched. Every result carries its evidence. call_id is your receipt for the charge.
Machine-readable failures
Errors return JSON such as {"error":"invalid_api_key"}. Failed lookups are refunded automatically.
url_required, invalid_url, unsupported_url_protocol, private_address_not_allowed, private_host_not_allowed, dns_resolution_failed, unsupported_content_type, response_too_large, redirect_limit_exceeded.invalid_api_key — missing or unknown key.insufficient_credits, with credits_required and credits_remaining.rate_limit_exceeded, with limit and window_seconds.fetch_timeout or fetch_failed — the site did not answer in time. Not charged.services_unavailable. Retry once after 30 seconds.One balance
Each successful lookup costs 1 credit from the same balance Capture uses. Free keys share one allowance of 10 calls per minute across Capture and Tech Stack. Attest fetches one page with a 12-second timeout, follows up to 5 redirects and reads up to 2 MB of HTML. Only public HTTP and HTTPS addresses are reachable; private networks are refused on every redirect and at connection time.
156 technologies · 31 categories
What a result means
Detection reads the response headers, cookies and HTML of the single page you send, as Attest's fetcher received it at checked_at. Technologies loaded only by later JavaScript, used only on other pages, or hidden behind a login may not appear, and an empty list means nothing was detected — not that nothing is installed. It is not a security audit or a vulnerability scan.
Same key as Capture
Issue a free key, then use it for Capture, Tech Stack and every other tool in the toolbox.
Get a free key