AUTHENTICATION
Use your existing AI7 credential
Send your personal AI7 API key as a Bearer token. Keep it server-side and never embed it in public client code.
Authorization: Bearer YOUR_AI7_API_KEYREQUEST
Screen a public merchant website
website_urlHTTPS URI · required
Public merchant website. Credentials, IP literals, private addresses, non-HTTPS URLs, and non-standard ports are rejected.
country_codeISO alpha-2 · required
Two-letter country code used to select the merchant policy baseline.
declared_merchant_namestring · optional
Merchant name supplied by the applicant or onboarding system.
declared_mccfour digits · optional
Declared merchant category code for comparison with product evidence.
max_pagesinteger · optional
Maximum same-origin pages to collect, from 1 to 20. Default: 12.
high_risk_threshold_percentnumber · optional
Scores at or above this percentage are High Risk. Default: 60.
review_threshold_percentnumber · optional
Scores from this percentage up to the High Risk boundary require Review. Lower scores are Safe. Default: 25.
get_pdfboolean · optional
When true, creates a permanent audit PDF with actual rendered screenshots, service description, processing log, findings, evidence, and the full result attachments.
customer_logo_urlHTTPS URI · optional
Public PNG or JPEG placed on the requested PDF report.
RESPONSE
Evidence, risk, and coverage
A successful request returns the full assessment even when optional enrichment is unavailable. Always inspect status, summary.decision_eligible, and the coverage fields before using the result.
FieldTypeDescription
screening_idUUIDUnique screening reference.statusstringcompleted or partial when required coverage is unavailable.merchant_identityobjectObserved names, addresses, contacts, social profiles, founders, leadership, and source-scoped public claims.domainobjectRDAP creation date, calculated domain age, and lookup status.policiesobjectPrivacy, terms, returns, shipping, support, and retention-language evidence.productsobject[]Observed products, prices, candidate MCC mapping, evidence IDs, and review signals.outgoing_linksobject[]External destinations grouped by purpose with source pages and risk signals.securityobjectNegotiated TLS and recommended HTTP security-header observations.screenshotsobjectRendered evidence coverage. Unavailable production providers are reported explicitly.social_mentionsobjectSocial-source coverage and items when an approved source is configured.destination_reputationobjectExternal-destination reputation coverage and findings.crawlobjectRobots status, pages collected, bounded limits, and page-level errors.findingsobject[]Explainable policy, security, domain, product, and destination observations.summaryobjectRisk score, level, dimensions, confidence, outcome, coverage, and decision eligibility.evidenceobject[]Source URL, retrieval time, HTTP status, evidence ID, and SHA-256 content digest.methodologyobjectVersioned limits and interpretation notes.reportobjectReturned when get_pdf is true: permanent report ID, transaction ID, SHA-256 digest, filename, and public capability URL.status reports execution coverage: completed means every required source completed and partial means at least one required source is unavailable or incomplete. It is separate from summary.risk_level, whose values are high_risk, review, and safe. A partial result always requires human review even when its score is below the Review threshold.
Status codes
200Screening returned; inspect coverage and decision eligibility
400Invalid URL, country, MCC, page limit, or request field
401Missing or invalid AI7 API key
502The website could not be collected safely
503Merchant screening is temporarily unavailable
METHODOLOGY
Bounded collection with explicit limits
The collector follows only public HTTPS destinations, validates DNS before each request, pins the validated address, rechecks every redirect, respects robots.txt, stays on the final merchant origin, and caps pages, bytes, redirects, and time. Candidate MCCs and keyword signals are review aids—not card-network classifications or automatic decline decisions. A missing enrichment result is shown as unavailable and never converted into a negative match.
LIVE TESTER
Run a merchant website check
This tester submits to the KYCProbe API engine. Direct integrations use api.ai7uae.com. The credential stays in this page's memory and is not stored.
API RESPONSEReady
{
"message": "Your JSON response will appear here."
}