Bearer key · JSON
POST /api/v1/techstack
curl -s -X POST https://getattest.com.au/api/v1/techstack \
-H "authorization: Bearer $ATTEST_API_KEY" \
-H "content-type: application/json" \
-d '{}'
Send the key as a bearer token in the authorization header. One key and one credit balance cover every service, including Attest Capture. A failed call is refunded automatically. No key yet? POST /api/v1/keys issues one with 25 free credits and no signup — see the key guide.
For agents
Use when
Use this when a task depends on what a website is built with: CMS, ecommerce platform, hosting, analytics, ad pixels, payments, chat or forms.
Not documented yet: a captured example response. This page only shows what the module publishes about itself, so the missing parts are absent rather than guessed at.
The longer Tech Stack guide, with the full list of detectable technologies, is at /techstack.
1 field
Input
Scroll the table horizontally to see all fields.
Field / Type / Required / What it does| Field | Type | Required | What it does |
|---|
url | string | Required | The public http(s) page to look up. A bare domain is treated as https://. |
|---|
HTTP 200
Response
Every successful response also carries call_id (your receipt for the charge), credits_charged and credits_remaining.
Scroll the table horizontally to see all fields.
Field / What it holds| Field | What it holds |
|---|
url | The URL as it was read. |
|---|
final_url | The URL after redirects. |
|---|
http_status | The status the page returned. |
|---|
technologies | Each detection: name, category, confidence and the header, cookie or page snippet that proved it. |
|---|
checked_at | When the page was fetched. |
|---|
Machine-readable failures
Errors
Errors return JSON such as {"error":"invalid_api_key"}. A failed call is refunded automatically.
Scroll the table horizontally to see all fields.
Code / Status / Meaning| Code | Status | Meaning |
|---|
url_required | 400 | No url was sent. |
|---|
invalid_url | 400 | url is not a URL this service can read. |
|---|
private_address_not_allowed | 400 | The URL resolves to a private or reserved address. |
|---|
unsupported_content_type | 400 | The URL did not return HTML. |
|---|
response_too_large | 400 | The page is larger than the read cap. |
|---|
redirect_limit_exceeded | 400 | The URL redirected more times than this fetcher follows. |
|---|
fetch_timeout | 502 | The site did not answer in time. Not charged. |
|---|
fetch_failed | 502 | The site could not be read. Not charged. |
|---|
On every service
Scroll the table horizontally to see all fields.
Code / Status / Meaning| Code | Status | Meaning |
|---|
invalid_api_key | 401 | The authorization header is missing or the key is unknown. |
|---|
insufficient_credits | 402 | The balance is below this call's cost. The response carries credits_required and credits_remaining. |
|---|
rate_limit_exceeded | 429 | Free keys share 10 calls a minute across every service. The response carries limit and window_seconds. |
|---|
services_unavailable | 503 | The credit store could not be reached. Retry once after 30 seconds. |
|---|
Where the answer comes from
Source and scope
Detection reads the response headers, cookies and HTML of the single page supplied, as the Attest fetcher received it. It is not a security audit or a vulnerability scan.
Attest reports what it read, with the source it read it from. It is general information, not advice, and not a legal record.
All Attest tools · Service list as JSON · OpenAPI