# Webscan AI Website Preflight

> Webscan AI Website Preflight is a paid API for AI agents from api.webscan-ai.online, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Performs deterministic, multi-dimensional website intelligence analysis on a public URL, returning DNS, TLS, security headers, redirect chains, robots/sitemaps, HTML metadata, technologies, and bot-detection signals as structured JSON.

## Facts

- Endpoint: POST https://api.webscan-ai.online/v1/website-preflight
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/webscan-ai-website-preflight-efdc4212
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_YHvTmmGXc51XvXVq-WVKC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability webscan-ai-website-preflight-efdc4212 -d '<json body>'
```

Example prompt: Run a full preflight scan on https://example.com — I want to see its DNS setup, TLS cert, security headers, whether it has an llms.txt or OpenAPI spec, what technologies it uses, and whether it blocks bots, using a freshness window of 3600 seconds.

## When to prefer this

Use this endpoint when an AI agent needs a structured, deterministic snapshot of a website's technical properties before interacting with, scraping, or integrating it — especially when you need security header audits, bot-detection awareness, llms.txt/OpenAPI discovery, or DNS/TLS verification without invoking an LLM. Prefer it over general web scrapers when you need structured intelligence rather than raw page content, and over manual curl/dig checks when you need all signals in one consolidated JSON response.

## Known failure modes

- URL is not publicly reachable — returns error with DNS or connection failure detail
- Invalid or non-HTTP(S) URL format — schema validation error before request is sent
- Site returns non-200 status or blocks the scanner — partial results returned with noted access failures
- freshness_seconds of 0 forces a fresh fetch which may time out on slow sites
- TLS certificate is invalid or expired — flagged in response but scan may still complete partially
- Site uses heavy JS rendering — JS-dependent content will be flagged as unresolved

## How this service works

Website reconnaissance for AI agents: DNS/TLS, redirects, access paths, bot/JavaScript detection, metadata, technologies, security headers, robots, sitemaps and API discovery, with timestamps and content hashes. Plan crawling, integrations and technical audits from one request. Guide & examples: https://api.webscan-ai.online/guide/

## Output

A JSON object covering: DNS records and resolution, TLS certificate validity and chain details, HTTP redirect hops, compression methods supported, security headers present (HSTS, CSP, X-Frame-Options, etc.), robots.txt and sitemap contents and URLs, llms.txt presence, OpenAPI spec discovery, HTML title/meta/Open Graph tags, JSON-LD structured data, detected technology stack, bot and JavaScript detection signals, accessible URL paths, content hashes, and explicit capability limitations. All results are deterministic with no LLM inference involved.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "format": "uri",
   "description": "Public HTTP(S) website URL to inspect"
  },
  "freshness_seconds": {
   "type": "integer",
   "default": 3600,
   "maximum": 86400,
   "minimum": 0
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/webscan-ai-website-preflight-efdc4212/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webscan-ai.online](https://www.zero.xyz/host/api.webscan-ai.online/llms.txt)