# Perimeter Watch — agent API reference

Base: https://perimeter-watch-api-production.up.railway.app

## Endpoints

### GET /health
Liveness check. Returns {"ok": true, "service": "perimeter-watch", "version": "1.0"}.

### POST /snapshot
One-time external-perimeter scan on a domain: {"domain": "example.com", "authority": true}.
authority MUST be true (attests you own/manage the domain). Rate limit: 3/IP/24h.
Returns rating (RED/AMBER/GREEN) + per-check detail: TLS cert expiry, domain
renewal, dangling CNAME takeover, CT-log lookalikes, with COVERAGE disclosure.

### GET /watch/{domain}
Watch-plan enrollment status for a domain.

### GET /stats
Service funnel counters.

## MCP server
Registry: io.github.entradox/perimeter-watch-scanner
Remote: https://perimeter-watch-api-production.up.railway.app/mcp/
Tools: pw_health, pw_snapshot, pw_watch_status, pw_stats

## Not
- Passive public-data checks only; no active third-party probing.

## Contact
support@aiagentscity.com