Feature

REST API

Everything you can do in the dashboard is available over HTTP. API key auth, JSON in / JSON out, predictable resource URLs.

Resources

/api/v1/account

Plan, limits, current domain count, overage state.

/api/v1/domains

List, create, update, and delete monitored domains. Includes verification status, port, latest cert summary, and grade.

POST /api/v1/domains/:id/verify

Trigger DNS TXT record verification.

/api/v1/domains/:id/ssl_certificates

Full SSL history for a domain — every cert Xpiry has ever observed, with all the metadata from a real handshake.

/api/v1/domains/:id/security_scan

Latest security scan: headers, CAA, DNSSEC, CT, OCSP, and the resulting grade.

/api/v1/domains/:id/check_logs

Per-check timing, status, and error messages — useful for debugging flaky endpoints.

/api/v1/alerts

List recent alerts, acknowledge them.

/api/v1/alert_rules

CRUD for notification channels (email, Slack, Teams, Discord, PagerDuty, webhooks).

API keys are scoped to an account. Generate one from Account → API keys, pass it as a bearer token, and you're set.

curl -H "Authorization: Bearer $XPIRY_API_KEY" \
     https://xpiry.dev/api/v1/domains

API access is included on the Pro and Agency plans. Rate limits are generous and per-key.

Free for one domain. No credit card required.