api.webintel-api.workers.dev

Checks and payment terms on this page refer to the endpoint above. Other listed endpoints have not been checked individually.

Base URLhttps://api.webintel-api.workers.dev/api

• GET/search/fifa-team-rankings—No price listedFIFA men's national team world ranking (FIFA public ranking API, no key): position, team, country code, total points, previous points and previous rank for one ranking date. Default date is the latest one listed on FIFA's site when built (2026-10-20); pass dateId to read another listed date. Men's ranking only.
• GET/security/subdomain-takeover—No price listedFor a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still resolves, and fetches the subdomain once to look for the service's 'unclaimed' page text. Verdicts are evidence, not proof; the list is community-maintained.
• GET/security/abuseipdb-check—No price listedAbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced.
• GET/security/censys-exposure—No price listedCensys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API.
• GET/security/epss-exploit-score—No price listedEPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all scored CVEs and the scoring date. EPSS predicts; it does not say an exploit exists (see cisa-known-exploits).
• GET/search/dev-to-articles—No price listedDEV Community (dev.to) latest articles for one tag (public DEV API, no key): title, author, publish time, reactions, comments, reading time and link. Search by tag only; the public API has no free-text search.
• GET/security/tor-exit-nodes—No price listedChecks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs). If it is an exit, adds the relays for that address from Onionoo: nickname, flags, country, first and last seen. Only exit IPs are on the list; a relay's other IPs are not checked.
• GET/security/csp-evaluator-audit—No price listedReads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read.
• GET/search/google-news—No price listedGoogle News search (public Google News RSS search feed, no key, English/US edition): headline, publisher, publish time and the Google News link for the newest matching stories. Google News links redirect to the publisher; article text is not returned.
• GET/search/theintercept-articles—No price listedThe Intercept articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key.
• GET/search/usda-market-news—No price listedUSDA AMS Market News (official MyMarketNews API): search the catalogue of livestock, grain, dairy, fruit/vegetable and other market reports by title, or pass a report slug id to get its latest published rows (prices, volumes, report date). Data straight from USDA; needs the owner's free MARS API key.
• GET/security/dns-propagation—No price listedAsks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL. It shows cache and geo-DNS differences between resolvers; it is two vantage points, not a worldwide propagation survey.
• GET/security/smb-exposure-test—No price listedChecks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address. Says whether SMB was seen open and when the record was last refreshed by the host data (not a live test). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed.
• GET/search/bleacher-report-articles—No price listedLatest Bleacher Report articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of bleacherreport.com (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text.
• GET/security/cert-revocation-crl—No price listedFor a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time.
• GET/search/shanghai-arwu-rankings—No price listedShanghaiRanking ARWU 2026 world university ranking (public table on shanghairanking.com, no key): world position, institution, national rank, total score and the six indicator scores (Alumni, Award, HiCi, N&S, PUB, PCP). The public page shows the top 30 only.
• GET/security/talos-ip-blacklist—No price listedCisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (daily, monthly and last 30 days), the /24 network's average magnitude and how many neighbouring addresses in that /24 Talos rates untrusted, poor, neutral or favorable.
• GET/search/reuters-articles—No price listedReuters latest articles from Reuters' public news sitemap (no key): headline, article URL and publication time, newest first. Covers only the most recent items in the sitemap; headlines and links only, no article text. Optional keyword filter on the headline.
• GET/security/cve-nvd-lookup—No price listedOne CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, whichever NVD marks primary first), CWE weakness IDs and up to 5 reference URLs. It does not say whether the CVE is being exploited (use cisa-known-exploits or epss-exploit-score for that).
• GET/search/crossref—No price listedCrossref works search (public REST API, no key): DOI, title, type, container (journal or book), year, authors and link for matching scholarly records. Metadata only; abstracts are not always present in Crossref.
• GET/search/openprescribing—No price listedNHS England primary-care prescribing for a drug (official NHSBSA English Prescribing Dataset, monthly, ~2 months behind; the raw data behind OpenPrescribing.net): items, actual cost (GBP) and quantity, grouped by region, ICB, GP practice or product presentation, largest first. Match on BNF chemical substance or presentation name. Open Government Licence, no key.
• GET/search/figshare-articles—No price listedFigshare public article search (public API, no key): id, title, DOI, publication date, item type and public page link for research articles, datasets and figures. Searches titles and metadata; file contents are not returned.
• GET/search/press-release-multi-wire—No price listedLatest press releases merged from public wire feeds: PR Newswire (all news), Business Wire (mergers & acquisitions) and Newswire.com. Newest first, de-duplicated, keyword filter on title/summary, each item tagged with its wire. Headlines, links, dates and summaries only. Public RSS, no key.
• GET/search/gtex-gene-expression—No price listedGTEx Portal gene expression (public API v2, no key): median TPM of one gene in human tissues, sorted highest first, with the GENCODE id it was matched to. Uses GTEx v8 data; unknown gene symbols return 404.
• GET/security/open-resolver-check—No price listedReports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address. It is a passive port fact only: it does not send a query, so it cannot say whether the server answers recursively for outside names. Absence means not seen, not closed.

A dash means the listing gives no price or method. Copy buttons copy the full URL.

Showing 25 of 129 listed endpoints. Next endpoints First endpoints