API Reference

The Zeodyn™ REST API lets you integrate AI agent commerce scanning directly into your applications, CI/CD pipelines, and monitoring workflows. Authenticate with a Bearer token, submit URLs for scanning, and receive comprehensive results programmatically.

Authentication

All API requests require a Bearer token. Create an API key from your account settings. Keys use the zd_live_ prefix and are shown only once at creation. Zeodyn stores a SHA-256 hash of each key — lost keys cannot be recovered.

Authorization header

Authorization: Bearer zd_live_xxxxx

Base URL

All endpoints are served from a single base URL:

Base URL

https://zeodyn.com/api/v1

Rate Limits

API rate limits are enforced per calendar month based on your subscription tier.

Tier	Monthly limit
Free	100 requests
Pro	1,000 requests
Growth	Unlimited

Every API response includes rate limit headers so you can track your usage:

Header	Description
X-RateLimit-Limit	Your monthly request allowance
X-RateLimit-Remaining	Requests remaining this month
X-RateLimit-Reset	Unix timestamp when the limit resets (start of next month)

When you exceed your limit, the API responds with 429 Too Many Requests and a Retry-After header indicating when you can retry.

Error Handling

All error responses follow a consistent JSON format:

Error response format

{
  "error": "A human-readable error message"
}

Status	Meaning
400	Validation error — check the request body or query parameters
401	Authentication failed — missing or invalid API key
403	Forbidden — your tier does not include this feature, or rate limit exceeded
404	Resource not found
429	Rate limit exceeded — wait and retry after the Retry-After period
500	Internal server error
502	Upstream error — the target site could not be reached
503	Service temporarily unavailable
504	Gateway timeout — the target site did not respond in time

Endpoints

The API provides the following endpoints. Click through for full request/response details.

POST/api/v1/scanSubmit a URL for scanning GET/api/v1/scan/{id}Retrieve a scan result by ID GET/api/v1/scansList your scan history POST/api/v1/batch/scanSubmit a batch scan (Growth+)GET/api/v1/batch/scan/{id}Check batch scan status (Growth+)GET/api/v1/batch/scansList batch scans (Growth+)POST/api/v1/auth/registerSend a magic-link sign-in email GET/api/v1/accountAccount info, tier, and usage GET/api/v1/account/plansList available plans (public)POST/api/v1/account/subscribeCreate a subscription checkout GET/POST/api/v1/account/api-keysList or create API keys GET/POST/api/v1/watched-sitesList or add watched sites GET/PATCH/DELETE/api/v1/watched-sites/{id}Manage a watched site GET/POST/api/v1/watched-sites/{id}/thresholdsScore thresholds (Growth+)GET/POST/api/v1/webhooksList or create webhooks (Pro+)POST/api/v1/webhooks/{id}/testTest a webhook (Pro+)

API scans return standard recommendations. AI-enhanced recommendations are available via the dashboard only.

Agent protocols

In addition to the REST API, Zeodyn™ supports two agent-native protocols that provide the same capabilities through different interaction models:

MCPPOST /api/mcpModel Context Protocol — 8 tools, JSON-RPC 2.0 A2APOST /api/a2aAgent-to-Agent — natural language tasks

API Reference

Authentication

Authorization header

Authorization: Bearer zd_live_xxxxx

Base URL

All endpoints are served from a single base URL:

Base URL

https://zeodyn.com/api/v1

Rate Limits

API rate limits are enforced per calendar month based on your subscription tier.

Tier	Monthly limit
Free	100 requests
Pro	1,000 requests
Growth	Unlimited

Every API response includes rate limit headers so you can track your usage:

Header	Description
X-RateLimit-Limit	Your monthly request allowance
X-RateLimit-Remaining	Requests remaining this month
X-RateLimit-Reset	Unix timestamp when the limit resets (start of next month)

When you exceed your limit, the API responds with 429 Too Many Requests and a Retry-After header indicating when you can retry.

Error Handling

All error responses follow a consistent JSON format:

Error response format

{
  "error": "A human-readable error message"
}

Status	Meaning
400	Validation error — check the request body or query parameters
401	Authentication failed — missing or invalid API key
403	Forbidden — your tier does not include this feature, or rate limit exceeded
404	Resource not found
429	Rate limit exceeded — wait and retry after the Retry-After period
500	Internal server error
502	Upstream error — the target site could not be reached
503	Service temporarily unavailable
504	Gateway timeout — the target site did not respond in time

Endpoints

The API provides the following endpoints. Click through for full request/response details.

API scans return standard recommendations. AI-enhanced recommendations are available via the dashboard only.

Agent protocols

In addition to the REST API, Zeodyn™ supports two agent-native protocols that provide the same capabilities through different interaction models:

MCPPOST /api/mcpModel Context Protocol — 8 tools, JSON-RPC 2.0 A2APOST /api/a2aAgent-to-Agent — natural language tasks