Anonymous scans are rate-limited at 10 per day per IP. An API key raises that to 100 scans per day per key — enough to monitor your own fleet of staging + prod domains from CI without hitting the wall.
No account, no email — just click the button. You'll
get a token that looks like ak_XXXXXXXXXX….
Present it as Authorization: Bearer <token>
on every POST /api/v1/scans call.
Key mints are themselves rate-limited at 5 per hour per IP — enough to recover from a lost token, tight enough that hoarding across the anonymous quota isn't practical.
Rather than hitting the REST API directly, grab an official client library. More languages follow.
pip install agentdiscoPyPI · GitHub (agentdisco-python-sdk) · MIT licensed
from agentdisco import AgentDisco
with AgentDisco(token="ak_…") as client:
scan = client.submit_scan("https://your-site.example")
print(scan.id, scan.status)