Back to features

Feature

REST API

Everything you can do in the dashboard is available over HTTP. API key auth, JSON in / JSON out, predictable resource URLs.

Resources

/api/v1/account

Plan, limits, current domain count, overage state.

/api/v1/domains

List, create, update, and delete monitored domains. Includes verification status, port, latest cert summary, and grade.

POST /api/v1/domains/:id/verify

Trigger DNS TXT record verification.

/api/v1/domains/:id/ssl_certificates

Full SSL history for a domain — every cert Xpiry has ever observed, with all the metadata from a real handshake.

/api/v1/domains/:id/security_scan

Latest security scan: headers, CAA, DNSSEC, CT, OCSP, and the resulting grade.

/api/v1/domains/:id/check_logs

Per-check timing, status, and error messages — useful for debugging flaky endpoints.

/api/v1/alerts

List recent alerts, acknowledge them.

/api/v1/alert_rules

CRUD for notification channels (email, Slack, Discord, webhooks).

Auth

API keys are scoped to an account. Generate one from Account → API keys, pass it as a bearer token, and you're set.

curl -H "Authorization: Bearer $XPIRY_API_KEY" \
     https://xpiry.dev/api/v1/domains

Availability

API access is included on every plan. Rate limits are per-key and plan-based: 60 requests/min on Free, 120 on Hobby, 300 on Pro, and 600 on Agency.

Read the full API docs

Start monitoring in minutes

Free for one domain. No credit card required.

Get started free

See the full feature list or pricing.