On this page
Supported scopes
| Scope | Purpose |
|---|---|
| * | All supported API scopes |
| ip:read | IP intelligence and ASN reads |
| credits:read | Credit balance reads |
| dns:read | DNS analysis |
| domain:read | Domain intelligence |
| headers:read | HTTP security/header analysis |
| email_security:read | Email security analysis |
| code:execute | Code Engine |
| ip_grabber:execute | IP Grabber operations |
| adsense:read | AdSense analysis |
| status:read | Status stream |
Wildcard access
The key service normalizes an empty scope request to the wildcard scope and preserves wildcard access when it is explicitly included.
Enforcement
Tool routes use a middleware chain that checks API-key authentication, plan entitlement, quota, required scope, and credit billing when the operation is chargeable.
{ "success": false, "error": { "code": "INSUFFICIENT_SCOPE", "message": "API key is missing required scope: dns:read" }, "requestId": "..." }