{
  "openapi": "3.1.0",
  "info": {
    "title": "VertexScan API",
    "version": "1.0.0",
    "description": "Free, honest external exposure scanner. Live-verifies cached intel and classifies every port (Confirmed / Phantom / Blind-spot) and CVE (actively-exploited vs version-guess). Light, non-intrusive probing only.",
    "contact": {
      "name": "VertexElite",
      "url": "https://vertexelite.org"
    },
    "license": {
      "name": "Terms",
      "url": "https://vertexelite.org/scan"
    }
  },
  "servers": [
    {
      "url": "https://vertexelite.org"
    }
  ],
  "paths": {
    "/api/scan": {
      "post": {
        "summary": "Run an honest exposure scan of a domain or public IP",
        "description": "Requires a valid Cloudflare Turnstile token. Rate-limited per IP. Private/internal/reserved targets are refused (SSRF-guarded).",
        "operationId": "scanHost",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "target",
                  "cfToken"
                ],
                "properties": {
                  "target": {
                    "type": "string",
                    "description": "Domain or public IPv4 to scan",
                    "example": "example.com"
                  },
                  "cfToken": {
                    "type": "string",
                    "description": "Cloudflare Turnstile token from the widget"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Scan report",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid or non-scannable target"
          },
          "403": {
            "description": "Turnstile verification required/failed"
          },
          "429": {
            "description": "Rate limit exceeded",
            "headers": {
              "Retry-After": {
                "schema": {
                  "type": "integer"
                }
              }
            }
          }
        }
      }
    },
    "/api/health": {
      "get": {
        "summary": "Health check",
        "operationId": "health",
        "responses": {
          "200": {
            "description": "Service status"
          }
        }
      }
    }
  }
}