Forest Gas Station

Endpoints (73 live)

• POST /domain/mail-preflight — MX/SPF/DMARC preflight; not mailbox verification. (free)
• POST /page/downloads — Extract PDF/CSV/XLS/XLSX/ZIP/JSON/XML links from static public HTML by suffix or download filename. Resolve relative/base links and deduplicate. Limits: 500 links, 8s, 5 redirects, 2 MiB. No JavaScript or file downloads; existence, MIME, size and file safety are unverified. Empty results are valid. 0.003 Base Sepolia test USDC per success; invalid inputs/errors are not settled. (free)
• POST /commerce/canonical-product — Resolve a public product redirect, canonical URL and stable provider identifiers using bounded HTTP and structured data. It does not execute JavaScript or assert unavailable facts. (free)
• POST /commerce/buyability — Report whether a public item appears buyable with explicit blockers such as out-of-stock or unknown. This is a preflight only: it never signs in, buys, creates an order or guarantees checkout. (free)
• POST /job/changed — Cheap watchdog for closed/materially changed job state. (free)
• POST /job/form-schema — Return structured application fields/questions where publicly exposed. (free)
• POST /job/apply-route — Return the current public application route; do not submit application. (free)
• POST /x402/discover — Search machine-payable x402 resources and normalize discovery metadata. (free)
• POST /openapi/preflight — Verify OpenAPI/Swagger document reachability, parseability, operations/auth/servers. (free)
• POST /api/discover — Find API docs, developer portal, candidate base URLs and auth docs. (free)
• POST /service/changed — Cheap watchdog: material service state changed since prior canonical hash? (free)
• POST /release/checksum — Find checksum/signature companion assets for a release asset. (free)
• POST /package/security — Known vulnerabilities for package+version; normalized evidence, not a safety verdict. (free)
• POST /docs/discover — Perform a bounded static discovery pass for machine-usable documentation: llms.txt, Markdown alternates, developer/API/auth docs, OpenAPI/Swagger and MCP candidates. Candidates are returned only after bounded verification. Maximum 10 HTTP requests, no JavaScript, recursive crawl or authenticated content. (free)
• POST /domain/preflight — Resolve a bare public domain into operational registration, DNS, HTTPS/TLS and mail-policy state using IANA-routed RDAP, DNS, MX/TXT/SPF/DMARC and a bounded TLS probe. No registrant personal data, vulnerability scanning, mailbox existence or deliverability claim. Provider uncertainty is explicit. (free)
• POST /release/asset-resolve — Resolve a public GitHub release into the most plausible downloadable asset for a normalized OS/architecture target, excluding source/signature/checksum files and linking checksum companions when present. Returns ambiguity instead of silently choosing tied candidates. No private repositories or customer authentication. (free)
• POST /commerce/product-identifiers — Extract public SKU, GTIN, UPC, EAN, ISBN, MPN and provider identifiers from a product source. Missing identifiers stay null and are never guessed. (free)
• POST /service/incidents — Return active service incidents in normalized form. (free)
• POST /package/license — Normalize declared package license metadata toward SPDX; no legal compatibility conclusion. (free)
• POST /service/status — Normalize a public Atlassian Statuspage into operational, maintenance, degraded, partial_outage, major_outage or unknown state, with components, active incidents and scheduled maintenance. V1 accepts an explicit status-page URL; it does not discover arbitrary providers or infer hidden service health. (free)

+53 more endpoints.