Workflows, not endpoints.
Pick a bundle. Ship.
Ten curated bundles compose Ollagraph's API into the workflows teams actually run — AEO, SEO, DNS, Email, Domain Intelligence, Scraping, Conversion, Site Audit, Security. Same token. Same bill. Same MCP surface.
AEO
11 endpoints10 endpoints for auditing how AI engines fetch, parse, and cite your content, plus llm-ready chunking.
View bundle →SEO
13 endpoints13 endpoints for technical SEO: meta, schema, redirects, broken links, mixed content, plus crawlability.
View bundle →DNS
6 endpoints6 endpoints for DNS lookups, propagation checks, certificate-transparency search, and subdomain enumeration.
View bundle →4 endpoints for email deliverability: verification, SPF / DKIM / DMARC posture, contact extraction, format parsing.
View bundle →Domain Intelligence
24 endpoints24 endpoints for WHOIS, ASN, GeoIP, SSL, DNSSEC, CAA, WAF detection, Wayback history, security.txt, social tags, caller-request inspection, and more.
View bundle →Scraping
13 endpoints13 endpoints for single, batch, async, smart, and llm-ready scraping, plus extraction, crawl, and captcha solve.
View bundle →Conversion
9 endpoints9 endpoints: convert PDF, DOCX, XLSX, PPTX, CSV, HTML, and image OCR to markdown; extract PDFs to structured JSON; and transcribe audio/video to text.
View bundle →Site Audit
10 endpoints10 endpoints composing AEO + SEO + Intelligence into a full domain health check.
View bundle →Security
7 endpoints7 endpoints for threat intelligence and malware scanning — URL, file-hash, and indicator reputation plus in-memory YARA file scanning.
View bundle →Agent Tools
8 endpoints8 offline utilities AI agents call on every turn — token counting, RAG chunking, JSON repair & validation, fuzzy matching, language detection, date parsing, and diffing. No model to host, no extra vendor.
View bundle →Which bundle fits your workflow?
Workflow cost band is a rough proxy — the sum of credits across the bundle's endpoints divided by four. Most real workflows touch a subset; treat the band as an upper bound on a single end-to-end run.
Every bundle, deep-linkable.
Share /bundles#b-aeo with a teammate, or click through to the dedicated page for sample requests, recipes, and FAQs.
AEO
11 endpoints10 endpoints for auditing how AI engines fetch, parse, and cite your content, plus llm-ready chunking.
For AI-discovery teams, agencies, and content engineers measuring AEO posture across pages and competitors.
- POST /v1/aeo/page-audit Orchestrator over 8-9 component AEO probes for a single URL. 3 cr
- POST /v1/aeo/competitor-diff Diff a domain's AEO posture against named competitors. 3 cr
- POST /v1/aeo/citation-readiness Likelihood that AI engines cite this page. 1 cr
- POST /v1/aeo/schema-coverage Coverage of JSON-LD schema types vs intent. 1 cr
- POST /v1/aeo/llm-fetch-simulator Simulate fetch from GPTBot, ClaudeBot, and PerplexityBot. 1 cr
- POST /v1/aeo/llms-txt-audit Audit an existing llms.txt for completeness and link rot. 1 cr
- POST /v1/aeo/ai-bot-allowlist Report robots.txt posture for 14 named AI crawlers. 1 cr
- POST /v1/aeo/freshness-signal lastmod and visible dateline coverage. 1 cr
- POST /v1/aeo/heading-hierarchy-score h1..h6 nesting quality score. 1 cr
- POST /v1/aeo/snippet-format-detect Detect list, table, definition, and FAQ snippet formats. 1 cr
- POST /v1/scrape/llm-ready Fetch and token-chunk a page for downstream AEO scoring or RAG ingest. 1 cr
SEO
13 endpoints13 endpoints for technical SEO: meta, schema, redirects, broken links, mixed content, plus crawlability.
For SEO consultants and in-house technical SEO leads.
- POST /v1/seo/meta-audit Title, description, canonical, og, and twitter card audit. 1 cr
- POST /v1/seo/schema-validate JSON-LD schema.org validation. 1 cr
- POST /v1/seo/readability Six readability formulas (Flesch, FK grade, Gunning, ARI, SMOG, Coleman-Liau). 1 cr
- POST /v1/seo/redirect-chain-map Walk 301/302/308 chains and tag each hop. 1 cr
- POST /v1/seo/broken-links-audit Crawl and report 4xx/5xx links on a page. 1 cr
- POST /v1/seo/anchor-text-audit Anchor-text distribution and over-optimisation flags. 1 cr
- POST /v1/seo/mixed-content https-on-http resource detection. 1 cr
- POST /v1/seo/snippet-candidates Featured-snippet-eligible passages from the page. 1 cr
- POST /v1/seo/keyword-extract Keyword surfacing with TF and density bands. 1 cr
- POST /v1/intel/sitemap sitemap.xml parse with per-URL summary. 1 cr
- POST /v1/intel/robots robots.txt parse and rule evaluation. 1 cr
- POST /v1/intel/redirects Follow and tag a redirect chain from a starting URL. 1 cr
- POST /v1/scrape/smart Fetch with auto-escalation through the render cascade. 1 cr
DNS
6 endpoints6 endpoints for DNS lookups, propagation checks, certificate-transparency search, and subdomain enumeration.
For DevOps doing migrations, security researchers, and domain investigators.
- POST /v1/dns/lookup A, AAAA, MX, TXT, NS, and CNAME per record type. 1 cr
- POST /v1/dns/intelligence Resolver-diverse summary of a domain's DNS posture. 1 cr
- POST /v1/intel/dns-propagation Propagation status across geographically distributed resolvers. 1 cr
- POST /v1/intel/cert-transparency-history crt.sh-backed certificate transparency timeline. 1 cr
- POST /v1/intel/subdomain-enumerate Subdomain discovery via certificate transparency logs. 1 cr
- POST /v1/intel/whois WHOIS / RDAP registry record. 1 cr
4 endpoints for email deliverability: verification, SPF / DKIM / DMARC posture, contact extraction, format parsing.
For outbound sales, ESP integrators, fraud and onboarding teams.
- POST /v1/verify/email Syntactic, MX, and disposable-domain detection. 1 cr
- POST /v1/intel/email-auth SPF, DKIM, and DMARC posture for a domain. 1 cr
- POST /v1/extract/contacts Pull emails, phones, and socials from a page. 1 cr
- POST /v1/parse/email Parse an address into local-part, domain, plus-tag, and display-name. 1 cr
Domain Intelligence
24 endpoints24 endpoints for WHOIS, ASN, GeoIP, SSL, DNSSEC, CAA, WAF detection, Wayback history, security.txt, social tags, caller-request inspection, and more.
For security teams, sign-up enrichment pipelines, fraud detection, compliance, SRE audits, OSINT investigations.
- POST /v1/intel/whois WHOIS / RDAP registry record. 1 cr
- POST /v1/intel/ssl TLS certificate, chain, issuer, and validity. 1 cr
- POST /v1/intel/asn ASN, announcing organisation, and prefix coverage. 1 cr
- POST /v1/intel/geoip Country, city, and coordinates from an IP. 1 cr
- POST /v1/intel/geoip/bulk Batched geoip lookup. 1 cr
- POST /v1/intel/ip-reputation Tor, cloud, datacenter, and CDN flagging. 1 cr
- GET /v1/intel/whoami What the internet sees about the caller: IP, geoIP, ASN, reputation, parsed User-Agent, curated header echo. One call replaces five. 1 cr
- POST /v1/intel/http-versions Detect HTTP/1.1, HTTP/2 (TLS ALPN), and HTTP/3 (Alt-Svc) support, plus TLS version, cipher, and HSTS posture. 1 cr
- POST /v1/intel/dnssec DNSSEC posture: DNSKEY + DS + AD-flag observations. Honest three-bit verdict, not a single 'valid' bit. 1 cr
- POST /v1/intel/nameservers Authoritative NS records + each resolved to A/AAAA + /16 diversification flag. 1 cr
- POST /v1/intel/caa Which CAs may issue certs for the domain. Parses issue/issuewild/iodef and detects deny-all. 1 cr
- POST /v1/intel/reverse-dns PTR lookup via dns.reversename. IP -> hostname for log enrichment. 1 cr
- POST /v1/dns/over-https Forward query through Cloudflare 1.1.1.1 or Google 8.8.8.8 via DoH (RFC 8484). 1 cr
- POST /v1/intel/security-txt Fetch + parse RFC 9116 security.txt (or legacy /security.txt). Flags rfc9116_minimum_compliant. 1 cr
- POST /v1/intel/social-tags Open Graph + Twitter Card + canonical + title + icons + lang + theme color in one fetch. 1 cr
- POST /v1/intel/cookies Set-Cookie response headers parsed per RFC 6265. Header-only by design. 1 cr
- POST /v1/intel/waf WAF/CDN detection from headers + body fingerprints. Cloudflare, Akamai, Fastly, AWS WAF, Imperva, Sucuri, F5, ModSecurity, etc. 1 cr
- POST /v1/intel/sri-audit External scripts + stylesheets audit with Subresource Integrity coverage. Supply-chain hygiene. 1 cr
- POST /v1/intel/wayback First + most-recent Wayback Machine snapshots via the Availability API. 1 cr
- POST /v1/intel/blacklist DNSBL aggregate across known lists. 1 cr
- POST /v1/intel/cert-transparency-history crt.sh-backed certificate transparency timeline. 1 cr
- POST /v1/intel/headers HTTP response headers snapshot. 1 cr
- POST /v1/intel/page HTML summary, meta, and canonical hints. 1 cr
- POST /v1/enrich/company Company-from-domain enrichment. 1 cr
Scraping
13 endpoints13 endpoints for single, batch, async, smart, and llm-ready scraping, plus extraction, crawl, and captcha solve.
For AI agents, data engineers, and RAG pipelines fetching the live web.
- POST /v1/scrape Single-page fetch. 1 cr
- POST /v1/scrape/batch Batch of URLs, synchronous return. 1 cr
- POST /v1/scrape/async Single fetch, returns job_id. 1 cr
- POST /v1/scrape/batch/async Batched fetch, returns job_id. 1 cr
- POST /v1/scrape/smart Auto-escalate through the render cascade. 1 cr
- POST /v1/scrape/llm-ready Fetch and token-chunk for RAG ingest. 1 cr
- POST /v1/extract/clean Boilerplate strip and reading-text extraction. 1 cr
- POST /v1/extract/structured Schema-driven extract via JSON schema input. 1 cr
- POST /v1/extract/tables Table rows from HTML. 1 cr
- POST /v1/extract/contacts Emails, phones, and socials extraction. 1 cr
- POST /v1/crawl Recursive crawl with depth and budget caps. 1 cr
- POST /v1/captcha/solve reCAPTCHA v2 / v3 solve. 1 cr
- POST /v1/captcha/auto Automatic captcha solve flow for sites behind a challenge. 1 cr
Conversion
9 endpoints9 endpoints: convert PDF, DOCX, XLSX, PPTX, CSV, HTML, and image OCR to markdown; extract PDFs to structured JSON; and transcribe audio/video to text.
For RAG ingest, knowledge-base pipelines, and document-processing SaaS.
- POST /v1/convert/pdf-to-markdown PDF to markdown. 1 cr
- POST /v1/convert/docx-to-markdown Word .docx to markdown. 1 cr
- POST /v1/convert/xlsx-to-markdown Excel .xlsx to markdown. 1 cr
- POST /v1/convert/pptx-to-markdown PowerPoint .pptx to markdown. 1 cr
- POST /v1/convert/csv-to-markdown CSV to markdown table. 1 cr
- POST /v1/convert/html-to-markdown HTML to markdown (clean). 1 cr
- POST /v1/convert/ocr Image OCR. 1 cr
- POST /v1/extract/document PDF to structured JSON (Docling): text blocks, tables with cells, reading order, page layout. 3 cr
- POST /v1/transcribe Audio/video to text + timestamped segments, auto-detected language (faster-whisper). 5 cr
Site Audit
10 endpoints10 endpoints composing AEO + SEO + Intelligence into a full domain health check.
For agencies running monthly client audits combining uptime, security, SEO, and AEO.
- POST /v1/aeo/page-audit Orchestrator AEO audit for the page. 3 cr
- POST /v1/intel/uptime Uptime probe with TTFB. 1 cr
- POST /v1/intel/headers HTTP response headers snapshot. 1 cr
- POST /v1/seo/broken-links-audit Broken link crawl. 1 cr
- POST /v1/seo/redirect-chain-map Redirect chain walk. 1 cr
- POST /v1/seo/mixed-content Mixed-content detection. 1 cr
- POST /v1/intel/ssl TLS certificate inspection. 1 cr
- POST /v1/intel/robots robots.txt parse. 1 cr
- POST /v1/intel/sitemap sitemap.xml parse. 1 cr
- POST /v1/seo/schema-validate JSON-LD validation. 1 cr
Security
7 endpoints7 endpoints for threat intelligence and malware scanning — URL, file-hash, and indicator reputation plus in-memory YARA file scanning.
For security teams, SOC analysts, and AI agents triaging URLs, files, and indicators against free, abuse-resistant threat data.
- POST /v1/intel/url-reputation Is a URL (or its host) a known phishing/malware URL? Matched against a free feed; we never fetch the URL. 1 cr
- POST /v1/intel/hash-reputation Look a SHA-256/SHA-1/MD5 up against a known-malware corpus. Only the hash is sent — never a file. 1 cr
- POST /v1/intel/threat One indicator (IP, domain, URL, or hash) returns a combined threat verdict across the free sources. 1 cr
- POST /v1/scan/file Scan an uploaded file with YARA, in-memory and never stored; built-in rules plus your own. 2 cr
- POST /v1/intel/blacklist Check an IP or domain against major DNSBL blocklists. 1 cr
- POST /v1/intel/ip-reputation Classify an IP — datacenter, cloud range, or Tor exit. 1 cr
- POST /v1/intel/ssl Inspect a host live TLS certificate — issuer, SANs, expiry. 1 cr
Agent Tools
8 endpoints8 offline utilities AI agents call on every turn — token counting, RAG chunking, JSON repair & validation, fuzzy matching, language detection, date parsing, and diffing. No model to host, no extra vendor.
For AI agent builders and RAG pipelines that want fast, deterministic text and JSON utilities behind the same Bearer token — instead of bundling six libraries into every agent.
- POST /v1/tokens/count Count tokens (and characters) for any string under a tiktoken encoding — estimate prompt cost before you call a model. Free. 0 cr
- POST /v1/text/chunk Token-aware text splitting for RAG ingestion: sliding windows of N tokens with optional overlap, decoded back to text. 1 cr
- POST /v1/json/repair Repair malformed JSON from an LLM — trailing commas, single quotes, missing brackets, markdown fences — into a valid object. 1 cr
- POST /v1/json/validate Validate data against a JSON Schema and get every error, or omit the schema to infer one from the data. 1 cr
- POST /v1/text/similarity Fuzzy string similarity (0–100): pairwise scores, or rank a list of candidates against a query, best first. 1 cr
- POST /v1/lang/detect Detect the dominant language of a string with a confidence score — offline, no network. 1 cr
- POST /v1/datetime/parse Parse a natural-language or messy date ("next tuesday", "3 days ago") into ISO-8601 plus a Unix timestamp. 1 cr
- POST /v1/text/diff Diff two strings (unified or ndiff) with a similarity score — verify an agents edit before applying it. 1 cr
One Bearer token. Every bundle.
1,000 credits on signup. Every endpoint in every bundle, day one. No card. No vendor sprawl.