{"openapi":"3.1.0","info":{"title":"OSX01 Passive Security Intelligence APIs","version":"0.1.0","description":"Three passive public-web products; not a penetration test or vulnerability exploit scan.","contact":{"name":"OSX01","url":"https://osx01.ee"}},"servers":[{"url":"/","description":"Current API deployment; replace with approved API origin before listing."}],"paths":{"/v1/exposure":{"post":{"operationId":"checkExposure","summary":"Passive exposure check for public web domains","tags":["OSX01 EXPOSURE"],"security":[{"ApiKeyAuth":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DomainRequest"}}}},"responses":{"200":{"description":"Passive check result"},"401":{"description":"Invalid API key"},"422":{"description":"Invalid or blocked domain"}}}},"/v1/recon":{"post":{"operationId":"checkRecon","summary":"Passive recon check for public web domains","tags":["OSX01 RECON"],"security":[{"ApiKeyAuth":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DomainRequest"}}}},"responses":{"200":{"description":"Passive check result"},"401":{"description":"Invalid API key"},"422":{"description":"Invalid or blocked domain"}}}},"/v1/surface":{"post":{"operationId":"checkSurface","summary":"Passive surface check for public web domains","tags":["OSX01 SURFACE"],"security":[{"ApiKeyAuth":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DomainRequest"}}}},"responses":{"200":{"description":"Passive check result"},"401":{"description":"Invalid API key"},"422":{"description":"Invalid or blocked domain"}}}}},"components":{"securitySchemes":{"ApiKeyAuth":{"type":"apiKey","in":"header","name":"X-API-Key"}},"schemas":{"DomainRequest":{"type":"object","required":["domain"],"additionalProperties":false,"properties":{"domain":{"type":"string","minLength":4,"maxLength":253,"example":"example.org","description":"Public ASCII DNS name, without URL scheme/path/IP."}}}}}}