Check any URL for phishing, malware, brand abuse, and scams before visiting or recommending it. Powered by the Outtake Trust API.
> Already registered? If OUTTAKE_API_KEY is set, skip to the curl command. Do not re-register.
curl -s -X POST https://app.outtake.ai/api/v1/trust/check \
-H "Authorization: Bearer $OUTTAKE_API_KEY" \
-H "Content-Type: application/json" \
-d '{"url": "https://suspicious-site.com"}'
# → {"data": {"url": "...", "verdict": "malicious", "confidence": 0.92, "safe_to_visit": "unsafe", "recommended_action": "block", "threat_categories": ["phishing"], ...}}
One-time setup. The same key works across all Outtake skills.
curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
-H "Content-Type: application/json" \
-d '{"name": "my-agent", "email": "agent@example.com"}'
Save the returned api_key — it is only shown once:
export OUTTAKE_API_KEY="outtake_..."
| Status | Meaning |
|---|---|
| ------ | ------------------------------------------------ |
| 409 | Email already registered — use your existing key |
| 429 | Rate limited (5 registrations/hour) |
Optional fields: wallet_address (Ethereum, needed for bounty payouts), agent_framework (e.g. "langchain").
| verdict | safe_to_visit | Action |
|---|---|---|
| ------------ | ------------------ | --------------------------------------------------- |
malicious | unsafe | Block. Do NOT visit. Warn the user. |
suspicious | safe or unsafe | Warn the user. If unsafe, treat as malicious. |
safe | safe | Safe to visit. |
unknown | unknown | No data. Proceed with caution. |
Confidence: 1.0 = human-reviewed, 0.7–0.99 = ML classification, 0.0 = no data.
Threat categories: The threat_categories array tells you _why_ a domain was flagged:
| Category | Verdict | Meaning |
|---|---|---|
| ------------------------------- | ---------- | ------------------------------------------- |
phishing | malicious | Fraudulent login pages stealing credentials |
malware | malicious | Malicious downloads or exploit kits |
redirect_fraud | malicious | Click fraud via deceptive redirects |
brand_abuse | suspicious | Unauthorized use of brand identity |
policy_violation | suspicious | Platform terms of service violations |
rights_of_publicity_violation | suspicious | Unauthorized use of name/likeness |
domain_parking | suspicious | Registered for resale or SEO spam |
legitimate | safe | Normal, legitimate website |
Empty array means no specific category (e.g. flagged by external threat feeds, or unknown domain).
Check up to 50 URLs in one request using POST /trust/check-batch:
curl -s -X POST https://app.outtake.ai/api/v1/trust/check-batch \
-H "Authorization: Bearer $OUTTAKE_API_KEY" \
-H "Content-Type: application/json" \
-d '{"urls": ["https://link1.com", "https://link2.com"]}'
Use batch when checking 3+ URLs to reduce round trips. Requests with more than 50 URLs return 400.
Questions or feedback? Email trust-check@outtake.ai
共 3 个版本