APKCube Android APK Version Diff

Endpoints (24 live)

• GET /api/v1/apps/:packageName/reviews — Google Play user reviews for an Android app, live from the Play Store: star rating, review text, helpful votes, the app version the reviewer ran and the developer's reply. Paged, sorted by newest, rating or most helpful, per country and language. For review analysis, sentiment and ASO. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• POST /api/v1/apps/:packageName/fetch — Fetch an Android app from Google Play into the APKCube catalogue when no APK is held yet: opens a job that downloads and verifies the app, usually within a few minutes. Turns a Google Play package name into a downloadable, signature-checked APK. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.1 USDC on Base)
• POST /api/v1/apps/:packageName/download — Download an Android APK or XAPK: returns a short-lived signed download URL for the newest build of an app, or for a chosen older version or CPU architecture. Every file is signature-verified before it is served. APK downloader for Google Play apps without a Google account or device. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.1 USDC on Base)
• POST /api/v1/apps/batch — Bulk Android app lookup: summary rows for up to 25 package names in one call, each with title, developer, icon, rating, installs, category and APK availability. Unknown package names come back in a not-found list rather than failing the call. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.02 USDC on Base)
• GET /api/v1/apps/:packageName/signing — Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the same package name, which flags repackaged or hijacked APKs. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/trackers — Advertising, analytics and tracking SDKs found in an Android app's APK: ad networks, analytics, install attribution, crash reporting, push messaging and social sign-in, each with its vendor. Mobile app privacy audit and tracker detection by package name. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/permissions — Every Android permission an app's APK declares, sensitive ones first, each with a readable label, its capability group (location, camera, contacts, SMS and more) and a plain-English explanation. Android app permission checker for privacy reviews and app vetting. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/sdks — Third-party SDKs and libraries inside an Android APK: ad networks, analytics, install attribution, crash reporting, push and social sign-in, each with its vendor and where it was found. Mobile app tech-stack and SDK intelligence by package name. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/versions — Every APK build held for an Android app, newest first: version name and code, date added, file size, SHA-256 checksum, minimum Android version, CPU architecture (arm64-v8a, armeabi-v7a, x86), APK or XAPK format and changelog. Android version history for old-version APK downloads and update tracking. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/similar — Apps similar to an Android app: alternatives and related apps for a Google Play package, each with title, developer, icon, rating, installs and category. For competitor research, app recommendations and market mapping. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.01 USDC on Base)
• GET /api/v1/apps/:packageName — Android app details by package name (e.g. com.whatsapp): title, developer, description, what's new, screenshots, icon, rating, installs, category, tags, price, required Android version, Editors' Choice, latest version and APK download availability. Google Play app metadata in one JSON record, for app research, app-store intelligence and catalog enrichment. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/protection — Detect app protection on an Android APK: commercial packers, obfuscators and anti-tamper protectors with their vendor, plus the Google PairIP flag. Shows when an app's code is wrapped so static analysis reads the protector rather than the app. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/security — Security scan of an Android APK build: SHA-256 checksum, VirusTotal malware verdict, signing certificates and permissions, plus findings such as a debuggable build, cleartext traffic, unguarded exported components, a packer, or a version that disagrees with the listing. APK malware and integrity check by package name. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/developers/:slug — All Android apps from one Google Play developer or publisher, most-installed first, each with title, icon, rating, installs and category. Publisher catalogue and portfolio lookup for app-market research. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.01 USDC on Base)
• GET /api/v1/developers/:slug/certificates — Every APK signing certificate behind one Android developer's apps, and whether any of those keys also signs packages outside that publisher. Publisher identity and signing-key intelligence for Google Play developers. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/lookup/certificate/:fingerprint — Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that signed one repackaged app has usually signed others. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/lookup/hash/:hash — Identify an Android APK by file hash: MD5, SHA-1 or SHA-256 to the app, version and build it belongs to. Reverse lookup for a file from a device or a checksum from a threat-intelligence feed, with no package name needed. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/raw — The complete stored scan record for an Android APK build, verbatim: manifest, native libraries, signing evidence and VirusTotal results with nothing derived or filled in. Raw APK analysis data for security researchers who apply their own rules. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.1 USDC on Base)
• GET /api/v1/apps/:packageName/manifest — AndroidManifest.xml analysis of an APK: targetSdk, compileSdk, debuggable, cleartext traffic, backup, sharedUserId, defined permissions, uses-feature, uses-library, exported components without a permission guard, and the native library inventory per CPU architecture. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)
• GET /api/v1/apps/:packageName/play — Google Play store listing data for an Android app in a chosen country storefront: star rating histogram, install estimate, in-app purchase price range, release date, declared permissions, content rating descriptors and the legal publisher. Google Play scraper data as structured JSON. Keyless pay-per-call in USDC on Base or Solana: no account or API key. (0.05 USDC on Base)

+4 more endpoints.