Check live service health and documented failure responses before you integrate.
Identity & Verification
Brand data API
Fill in a company's brand in one request. Send a domain, a stock ticker, an ISIN or a company name and get the name, description, declared social profiles, a square logo and a wide logo as image URLs, and the brand colors read from the logo itself, each with where it came from and when it was checked.
Used by people at these companies
Trust signals before you integrate
Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.
OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.
Authenticated endpoints use API keys with clear credit costs before you call them.
Start with 1,000 free credits every month. Need more? Pick a monthly plan or buy a one-time pack.
What this API helps you ship
Use this page as a production brief: endpoints, examples, response shape, and the workflow pieces needed to plug DomScan into your own product.
Embed domain checks, DNS intelligence, risk signals, or enrichment into onboarding, search, and internal tools.
Replace repeated manual lookups with scheduled jobs, alerting, and reproducible investigation steps.
Use predictable fields, documented status codes, and credit costs instead of scraping provider pages.
Feed agents, dashboards, SOAR playbooks, and CRMs through OpenAPI, SDK, Postman, or MCP.
Integration workflow
A simple path from first request to repeatable production usage.
Send your API key with the documented header and keep requests consistent across services.
Start from the curl and HTTP samples, then map the parameters into your application code.
Use status codes, credit costs, and response fields to build retries, logs, and alerts.
Developer kit
Jump from this page into machine-readable docs, request collections, SDKs, or agent tooling.
Generate clients or inspect every request and response shape.
Postman collectionImport ready-made requests for manual testing and team handoff.
SDKs and CLIUse maintained packages and command-line workflows instead of writing boilerplate.
MCP integrationExpose domain intelligence to AI agents and internal assistant workflows.
Parameters and response map
Scan the inputs, output fields, and status codes before wiring the endpoint into your client.
Parameter
Example response
HTTP status codes
Endpoints
/v1/brand
Trust signals before you integrate
Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.
Check live service health and documented failure responses before you integrate.
OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.
Authenticated endpoints use API keys with clear credit costs before you call them.
Start with 1,000 free credits every month. Need more? Pick a monthly plan or buy a one-time pack.
Key Features
The palette comes from the decoded logo pixels, with transparent areas and plain backgrounds left out, in hex, RGB and OKLCH. The theme color the website declares is reported separately.
Get the square brand mark and, when the website publishes one, its wide header or wordmark logo. Both are downloaded and decoded before they are returned.
Each field says present, absent or unknown. A website that blocks or times out gives unknown fields, never empty ones, and a ticker that matches several companies returns the candidates instead of a guess.
Watch a brand domain with a brand alert subscription and receive brand.updated on your webhook when its logos, colors, name or social profiles change.
Example request
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/brand?domain=stripe.com"
Example response
{
"query": { "type": "domain", "value": "stripe.com", "exchange": null },
"status": "present",
"domain": "stripe.com",
"name": { "status": "present", "value": "Stripe", "provenance": { "source": "website", "method": "declared_organization_name" } },
"logo": {
"status": "present",
"value": { "url": "https://domscan.net/v1/logo/stripe.com", "source": "touch_icon", "verification": "decoded", "native_width": 180, "native_height": 180 }
},
"wide_logo": {
"status": "present",
"value": { "url": "https://domscan.net/v1/logo/stripe.com?variant=wide", "source": "logo_image", "aspect_ratio": 2.4 }
},
"colors": {
"status": "present",
"value": {
"from": "logo",
"dominant": { "hex": "#635bff", "rgb": { "r": 99, "g": 91, "b": 255 }, "oklch": { "css": "oklch(57.84% 0.2346 278.29)" }, "share": 0.8712 },
"background": null
},
"provenance": { "source": "logo_pixels", "method": "quantized_palette" }
},
"theme_color": { "status": "present", "value": { "declared": "#635BFF" }, "provenance": { "source": "website", "method": "meta_theme_color" } },
"socials": { "status": "present", "value": [{ "platform": "x", "url": "https://x.com/stripe", "declared_by": "same_as" }] },
"checked_at": "2026-11-02T10:00:00.000Z"
}
Frequently asked questions
Three credits per request, including absent and unknown answers. Invalid requests, and lookups that fail because DomScan's own company data is unavailable, are refunded. Each logo image URL in the answer costs one credit when you request it.
Yes. You may cache and store the results and the logos in your own systems. Responses carry an ETag and cache headers so you can revalidate stored copies. Logos and names remain the trademarks of their owners.
From the pixels of the decoded logo. Similar colors are grouped, transparency and a plain background are left out, and the same logo always gives the same palette. The theme color the website declares is a separate field.
Yes. Send ticker, optionally with exchange, or isin or name instead of domain. A domain is used only when exactly one company matches; otherwise the answer is unknown with the reason and the candidates.
Related tools and resources
HTTP status codes
These are the HTTP status codes to handle, so you can tell apart successful responses, auth issues, credits, rate limits, missing data, and upstream failures.
Request successful
These are the HTTP status codes to handle, so you can tell apart successful responses, auth issues, credits, rate limits, missing data, and upstream failures.
Invalid parameters
Missing or invalid API key/session.
Not enough credits to run this request.
Rate limit exceeded
Look up a brand

