API keys
The API works without a key at the same limits a browser gets. A key raises the hourly ceiling and makes the rate-limit identity the key rather than your IP address, which matters if your team shares an outbound address.
Sign in with an email address — no password. We store only sha256(key), so the key is shown once at creation and cannot be recovered afterwards. Losing it means creating a new one.
Using a key
curl -H "Authorization: Bearer imd_xxxxxxxx_…" \ https://inspectmydns.com/api/v1/domain/example.com
Every endpoint is described in the OpenAPI spec.
Using it from an agent
One request returns one complete report — no job to poll, no pagination — so this is an easy API for an agent to drive. What an agent needs telling is the shape of the answer rather than its format: that a severity: "unknown" is our measurement failing and not the domain’s, that a scan sends live queries to somebody else’s nameservers, and that a 429 already carries the report it is being told to wait for.
Paste this into a system prompt, a CLAUDE.md, a skill, or the top of a task description. It works with or without a key.