List tracked domains

Every root domain the monitor scans, with live counters and last scan status.

GEThttps://chaos.thescope.top/api/v1/domainsscope: read

searchstringoptional

Case-insensitive substring match on the domain.

platformstringoptional

Filter by platform slug (hackerone, bugcrowd, intigriti, yeswehack, self).

enabledbooleanoptional

Only enabled (true) or disabled (false) domains.

sortstringoptionaldefault domain

Ordering of the result set.

domaintotal_subdomainsnew_subdomains_last_scanlast_scanned_at

limitintegeroptionaldefault 100

Rows to return (max 1000).

offsetintegeroptionaldefault 0

Rows to skip.

Example response

200 application/json

{ "data": [ { "domain": "lovable.app", "total_subdomains": 9948 } ], "meta": { "limit": 100, "offset": 0, "total": 10461 } }

400invalid_bodyA POST body was missing or was not valid JSON.

400invalid_domainThe supplied domain is not a valid root domain.

400invalid_queryA required query parameter was missing or too short.

400invalid_idA path id was not a UUID.

401missing_tokenNo Authorization or X-API-Key header was sent.

401invalid_tokenThe token is malformed or unknown.

401revoked_tokenThe token was revoked by its owner.

404not_foundThe domain, platform, scan or endpoint does not exist.

405method_not_allowedThe HTTP verb is not supported on that path.

500query_failedA database query failed while serving the request.

500server_errorAn unexpected error occurred.

Full catalogue with fixes on the errors page.

OpenAPI 3.1 spec

Get one domain

GETTry it

API token

Kept in this browser tab only and sent straight to this API.

searchquery

platformquery

enabledquery

sortquery

limitquery

offsetquery

https://chaos.thescope.top/api/v1/domains?sort=domain&limit=100&offset=0

curl "https://chaos.thescope.top/api/v1/domains?sort=domain&limit=100&offset=0" \
  -H "Authorization: Bearer chs_live_xxxxxxxxxxxx"