GET /domains/{domain}1 (2 with include)Host or root profile: detections with intervals, versions, hosts, company refs, changes_90d. Query: live_only, countable_only, category, hosts=all|root, include=evidence,history. include=evidence costs the second credit and returns an empty evidence[] in this release, so leave it off.
GET /domains/{domain}/history?technology=&from=&to=1Verification series per host and technology.
GET /domains/{domain}/changes?since=&kind=1 when events existChange events on the root and its hosts.
GET /companies/resolve?domain=&name=&country=1Candidates with match score, org_id, hq_org_id, domains.
GET /companies/{org_id}2Firmographics, group, legal ids, domains, aggregated stack with per-host provenance.
GET /companies/{org_id}/technologies1 per pagePaginated stack.
GET /companies/{org_id}/changes1 per pageChange events across the company hosts.
GET /companies/{org_id}/domains1 per pageDomains and hosts of the company.
GET /groups/{hq_org_id}/technologies2Footprint of a corporate group: shared[] and by_company[].
POST /lists/companies1 per 25 rowsCompanies matching a filter, one row per company, cursor paginated.
POST /lists/hosts1 per 50 rowsHosts matching a filter, one row per host.
GET /changes?technology=&kind=&country=&since=&cursor=1 per 25 eventsUniverse change feed.
POST /webhooks1 per 25 events deliveredRegister a filtered change webhook (paid tiers). GET lists, DELETE /webhooks/{id} removes.
POST /bulk/domainsas lookups, 20 percent off above 1,000Up to 32 domains synchronously, larger jobs return 202 with a job_id; GET /bulk/{job_id} and /bulk/{job_id}/result (NDJSON, 7 days).