Run a passive website inspection on an authorized host
Analyzes one public HTML page and bounded discovery files within the approved Space host. A managed domain permits its www alias. Redirects and ancillary requests are checked at every hop. Raw response content and share images are excluded. Explicitly request history to retain a summary.
/api/v1/marketing/site-inspectionsWorkspace automation for approved Dashio products. Each token is scoped to one Space and independently granted operations. Requests spend shared minute credits, and selected operation groups also share hourly quotas.
Required token scope is marketing:inspections:run. Scopes are independent.
Conditional token scope marketing:inspections:save. Required when options.saveHistory is true.
This operation uses 15 credits from a shared budget of 60 credits per token and 300 per Space each UTC minute. The inspection group shares 8 requests per token and 20 per Space each UTC hour.
Run these examples on a trusted server with DASHIO_API_TOKEN configured. Use a private terminal when inspecting response data. Examples send one request with a bounded timeout and do not retry automatically.
Authentication
Dashio developer token (HTTP Bearer) API authentication guide
Path parameters
None documented.
Query parameters
None documented.
Header parameters
None documented.
Request body
application/json · Required
urlstring (uri)RequiredAbsolute HTTP(S) address on a default port. The hostname must be managed or currently verified in this Space. Credentials, query strings and fragments are disallowed. Minimum length: 1. Maximum length: 2048.
optionsobjectOptionalNo field description supplied.
Responses
Headers on every response
X-Request-Idstring (uuid)OptionalServer-generated ID to include in a support request.
200
Passive observations, a score and optional history-save receipt.
Response headers
RateLimit-LimitintegerOptionalPer-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.
RateLimit-RemainingintegerOptionalRequests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.
RateLimit-ResetintegerOptionalUnix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.
application/json
requestedUrlstring (uri)RequiredNo field description supplied.
finalUrlstring (uri)RequiredNo field description supplied.
statusCodeintegerRequiredMinimum: 100. Maximum: 599.
responseTimeMsintegerRequiredMinimum: 0.
redirectsarray of objectRequiredMaximum items: 4.
inspectedAtstring (date-time)RequiredNo field description supplied.
previewobjectRequiredNo field description supplied.
summaryobjectRequiredNo field description supplied.
checksarray of objectRequiredNo field description supplied.
historySaveStatusstringRequiredAllowed values: "not-requested", "saved", "failed".
historyIdstring | null (uuid)RequiredNo field description supplied.
400
Unsupported parameters or invalid request data.
application/json
statusCodeintegerRequiredMinimum: 400. Maximum: 599.
statusMessagestringOptionalA safe explanation suitable for display.
dataobjectRequiredNo field description supplied.
401
A valid developer token is required.
Response headers
WWW-AuthenticatestringOptionalBearer authentication challenge. A rejected token can include the invalid_token error.
application/json
Uses the same response body schema as HTTP 400.
402
An active Marketing entitlement is required.
application/json
Uses the same response body schema as HTTP 400.
403
The token lacks the required grant or the hostname is not authorized for this Space.
application/json
Uses the same response body schema as HTTP 400.
404
The resource was not found or the Developer API is unavailable.
application/json
Uses the same response body schema as HTTP 400.
409
The Marketing plan or quota state is changing. Retry shortly.
application/json
Uses the same response body schema as HTTP 400.
413
The request body exceeds the supported size.
application/json
Uses the same response body schema as HTTP 400.
415
JSON is required or the destination is not HTML.
application/json
Uses the same response body schema as HTTP 400.
422
The HTML exceeds the bounded analysis work limit.
application/json
Uses the same response body schema as HTTP 400.
429
The token, Space or inspection allowance is exhausted. Edge traffic limits can also return 429.
Response headers
RateLimit-LimitintegerOptionalPer-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.
RateLimit-RemainingintegerOptionalRequests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.
RateLimit-ResetintegerOptionalUnix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.
Retry-AfterintegerOptionalSeconds to wait before retrying, when the limiting policy supplies a retry time. Minimum: 1.
application/json
Uses the same response body schema as HTTP 400.
502
The destination could not be inspected.
application/json
Uses the same response body schema as HTTP 400.
503
The Marketing operation is temporarily unavailable.
application/json
Uses the same response body schema as HTTP 400.
504
The destination did not respond before the inspection deadline.
application/json
Uses the same response body schema as HTTP 400.
Was this helpful?