tunnelmind.ai

Returns a minimal status object confirming the API is alive.

Returns the complete surveillance intelligence record for a domain name.

Returns a paginated list of domains from the tracker database.

Returns an entity record for a surveillance company or data broker, including its industry, estimated annual data value per user (in USD), categories of personal data collected, and the full list of domains it controls.

Returns a paginated list of corporate entities in the TunnelMind surveillance database.

Searches both the domains table and the entities table simultaneously.

Makes a live HEAD request to the target domain from the Cloudflare edge, follows up to 5 redirects, and returns the full redirect chain, final HTTP status, key response headers, a security header score, and any third-party surveillance actors referenced in the Content-Security-Policy header.

Fetches up to 32KB of the domain's HTML and response headers from the edge, then fingerprints the content for known CMS platforms, JavaScript frameworks, CDN providers, and analytics tools.

Retrieves the target domain's `robots.

Probes a domain for known AI agent integration signals: `llms.

Fetches a domain's homepage and checks for content patterns that could constitute prompt injection attacks against AI agents that visit and ingest the page.

Checks a domain for all known AI training data opt-out mechanisms beyond robots.

Returns metadata for a TunnelMind surveillance receipt — a signed document proving that a specific user's surveillance exposure was observed, measured, and recorded at a specific time.

Tamper-detection verification for TunnelMind surveillance receipts.

Self-serve free tier — the rung between anonymous access and paid blocks.

Returns the tier, label, masked owner email, creation date, last-used timestamp, today's request count, and daily request limit for the API key used in this request.

Permanently deactivates the API key used to make this request.

Returns the current status of a task created by an `?

Marks the task as `cancelled`.

Opens a persistent SSE connection that emits events as the task progresses.

Returns NDJSON (one JSON object per line) of audit log entries.

Looks up each submitted domain in the TunnelMind tracker database, aggregates risk metrics (avg score, max score, fingerprinters, high-risk domains, entity ownership), and issues a signed surveillance receipt.

Confirms whether an SSP/exchange is authorized to sell a publisher's inventory according to that publisher's ads.

Runs up to 100 ads.

Live traction numbers computed from sources the Worker owns: the hash-chained D1 audit log (7-day call volume, distinct identified callers, top operations), the stored-receipt table, and Stripe (succeeded charges → paying customers, gross USD).

P4 corpus replication, the OPA "push data into the PDP" pattern.

The exact bytes the manifest's sha256 commits to.

JSONL diff vs the previous snapshot — apply +/~/- lines instead of re-pulling the corpus.

One sample per 20-minute monitor sweep.

P83 Gate 1.

P75 registry aggregation: the cross-lens join applied to agent identity.

Reconciles a claimed bot User-Agent against the operator's OWN published IP-range feed (Googlebot, GPTBot, OAI-SearchBot, ChatGPT-User, PerplexityBot, Perplexity-User, Bingbot).

Neutral third-party Web Bot Auth verification.

Subscribe to a node (ip, domain, asn, or entity slug).

Returns the caller's active and inactive subscriptions (signing_key redacted).

Read one of your subscriptions (signing_key redacted).

Cancel a subscription.

P72 RFC 6962 transparency log over the unified receipt ledger (ADR-010).

Proves a specific receipt (by unified `receipt_id`, lens alias, or raw `leaf_index`) is included in the tree at `tree_size` (default: the latest STH's).

Proves the log at size `second` is an append-only extension of the log at size `first` — history was never rewritten.

P72 unified receipt ledger (ADR-010): every receipt-issuing surface (cross-lens verify, tracker verify, verdict, profile, explain, GhostRoute, Sigil/ATAP, compliance export) records the exact signed document it returned, keyed by one ID space.

P73 fast attributes endpoint (PIP-PLAN P3): a full `POST /v1/verify` resolve fans out across four lenses (~2s) — fine for preflight, fatal inside a per-request authorization loop.

The Tracker lens-owned verify surface: a per-node verdict over the normalized DDG Tracker Radar / IAB TCF / Disconnect.

Confirms a publisher controls a domain by checking for a DNS TXT record the owner publishes under `_tunnelmind.

Classifies an IPv4 or IPv6 address by network type — the high-value ad-fraud signal being datacenter traffic posing as residential or living-room (CTV) devices.

Reports whether a domain publishes ads.

Verifies that a mobile or CTV app bundle ID actually exists in the relevant app store — used to detect bundle spoofing in bid requests.

A2 — the cross-lens join.

Returns all three lens views for a single node key without computing a fused verdict.

The reconciliation layer in one call.

The single call an agent makes before transacting with a destination on the open web.

Call this when you need to ACT ON a verdict and prove why.

Call this before routing traffic, bidding on inventory, or trusting a counterparty.

Observed component counts first, a labelled derived roll-up second.

Reconciles every sell path a publisher declares (`sells_through`) against each SSP's own sellers.

Scores an entity by the trust character of its neighbours — the SSPs its publishers sell through and the DSPs it buys through.

Surfaces other entities that operate as a coordinated team with this one: they share a NARROWLY-held direct seller account (2–8 entities — network house accounts shared by hundreds are separated into `house_accounts_excluded`, not counted) or co-own an exchange seat.

The core Sigil pre-bid call.

Verifies the authenticity and expiry of a `sigil_token` returned by `sigil_verify_supply_path`.

The bid-time contract.

Reconstructs the supply paths for a publisher domain from Sigil's own crawl and returns them ITEMIZED — distinct from `sigil_verify_supply_chain` (which verifies a schain the caller brings) and from `signal_dark_pool_risk` (which returns only aggregate counts).

One public "state of the corpus" readout — the whole graph in a single call.

The over-time layer behind the site's website map (the radar's evolution).

D4 — the freshness contract a PDP can gate on.

GhostRoute is TunnelMind's fourth lens: routing-integrity / sovereignty verification.

Retrieves a previously-issued, signed GhostRoute receipt by its GR-YYYY-NNNNNNN id, for independent audit of a past sovereignty verdict.

Returns GhostRoute's ownership-graph record for an autonomous system: the registrant/parent organisation, its HQ country and sovereign zone, RIR, and cloud/AI-infrastructure flags.

Checks whether a domain or ASN belongs to a known AI company's infrastructure and what sovereignty it CLAIMS (program, zone, HQ), the baseline GhostRoute scores routing reality against.

Returns GhostRoute's first-party Certificate-Transparency witness state: the latest signature-verified Signed Tree Head (STH) for every trusted, non-Google CT log TunnelMind independently witnesses, plus a regression scan over our own append-only history.

Returns GhostRoute's per-cert inclusion proofs: each is a cryptographic demonstration that the exact certificate a host serves is included in an append-only CT log whose root TunnelMind signature-verified — upgrading "a monitor said this cert exists" to "proven in a log we witness".

Returns the durable, deduplicated ledger of CT equivocation events the GhostRoute witness worker detects and pushes — a tree_size_rewind (an append-only log shrank), a root_fork (one tree_size witnessed with two different Merkle roots = a split-view log), or an sth_signature_invalid (a log's latest Signed Tree Head failed signature verification).

Returns the routing anomalies the bgp-monitor has observed against TunnelMind's BGP watchlist — the witnessability layer's routing dimension.

Returns a publisher's ads.

Returns the active, versioned default weights used to combine an entity's trust-score components, plus the list of spec components that are not yet evaluated.

Returns the pre-computed 0.

Scores up to 200 entities in one round-trip — built for agents evaluating many supply sources during campaign setup.

Registers an ATAP v0.

Ingests one agent-reported event (`bid:submitted`, `bid:won`, `bid:lost`, `budget:decremented`) into an AIT's hash-chained attestation log.

Rolls every not-yet-blocked Witness Event for an AIT into one signed ATAP Attestation Block with a profile `period_summary`, chained onto the prior block.

Returns an AIT's status, chain head hash, event count, pending-event count, per-tier event counts, and the anchored-bid coverage ratio.

Assembles the ATAP v0.

Returns your current compliance configuration (regime, retention_days, export_formats, enabled) and the catalog of supported regimes (EU AI Act Art.

Set the customizable knob: which regulatory regime your auditor maps to, how long to retain decision content, and which export formats to offer.

Returns your hash-chained decision records — one per verdict-bearing call (/v1/verify, /v1/explain, /v1/preflight, /v1/profile) made while compliance is enabled.

Generates a signed export bundle of your ledger over an optional time window, mapped to your regime's field names and citation, with a manifest + chain-integrity proof + the latest signed checkpoint.

Recomputes your entire hash chain server-side and reports integrity ({ intact, entry_count, chain_head_hash } — plus reason + first_break_seq if a record was altered or deleted), alongside the most recent Ed25519 checkpoint signed with the TunnelMind receipt key.

Returns the TunnelMind analyst config bundle.

Single-item revocation lookup per Receipt Format v1.

Runs a curated signature corpus over a piece of untrusted text — content an agent is about to consume, a retrieved document, a tool result, an email body — and returns the matched injection patterns plus a bounded 0.

Connect to a caller-supplied MCP server (Streamable-HTTP transport), read its advertised tools, and run the injection corpus over every tool name / description / input schema — plus a capability heuristic that flags broad, dangerous powers (shell execution, filesystem write, credential access, arbitrary network, destructive DB ops).

Close the loop: after you acted on a TunnelMind verdict, tell us how it went.

Public read of the crowd-sourced outcome aggregate for a node — how callers reported their real-world results after acting on its verdict.

Validates an agent's x402 v1 client implementation against a TunnelMind surface end-to-end.

Returns aggregate Scry corpus telemetry: total observation count, distinct source IPs, first/last observation timestamps, last-24h activity, and per-protocol breakdowns.

Returns Scry's corpus knowledge for a single IPv4 address: when it was first/last observed, observation count, protocols and ports targeted, ASN, country, category (actor/scanner/not_observed), and confidence_bucket (low/medium/high).

Look up many IPv4 addresses in one request.

Top-N source dimensions over a time window.

Bucketed observation counts over time.

Roll-up of corpus activity for a single ASN — observation count, distinct source IPs, actor count, scanner count, high-confidence actor count, and per-protocol breakdown.

Roll-up of corpus activity by ISO country code.

List detected attack tools — (protocol, payload, path) tuples sent by 3+ distinct source IPs.

Single tool detail by 16-char hex id from scry_tools.

Active threat campaigns — coordinated attacker activity that exceeds the noise floor.

Single campaign detail by id (format: c[0-9a-f]{15}).

Recent observations feed — aggregated by source IP within a time window.