Skip to main content

First Scan (API)

note

API paths that contain tenant keep that word for compatibility. In the product it means your workspace.

Choose a persona base path​

  • Guest (no API key): https://dralvia.tech/api/guest (strict limits)
  • Workspace (recommended): https://dralvia.tech/api/tenant (API key required)

Option A: Guest scan (no account required)​

This is the fastest way to verify the API end-to-end.

curl -sS -X POST "https://dralvia.tech/api/guest/scan" \
  -H "Content-Type: application/json" \
  -d '{"domain":"example.com"}'

Option B: Workspace scan (API key)​

  1. Generate your API key in the portal: https://dralvia.tech/#/api-keys
  2. Store it in a secret manager and load it into your shell as an environment variable:
export DRALVIA_API_KEY="<YOUR_API_KEY>"
  1. Run the scan:
curl -sS -X POST "https://dralvia.tech/api/tenant/scan" \
  -H "Authorization: Api-Key $DRALVIA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"example.com"}'

What to look for in the response​

  • score and risk_level for the headline verdict
  • flags for the specific findings
  • tabs.detection and tabs.redirect_timeline for drill-down details (when present)

For full parameter/response docs, see: