CertScore Pulse API beta

Agent-readable beta fallback

This page is a plain browser-readable fallback for agents or review tools whose JSON fetch layer cannot retrieve API endpoints. This is beta software. The current Pulse API beta version is 0.5.1. The canonical Pulse API remains /api/v1/pulse.

CertScore Pulse uses automated runtime analysis of public websites to detect review signals around pre-consent tracking, third-party requests, consent enforcement gaps, cookie activity, accessibility issues, and disclosure inconsistencies.

Agent quick start

Basic HTTP agents

  1. If you do not support OpenAPI actions, call https://certscore.ai/api/v1/pulse?url=<public URL>&format=markdown&detail=standard.
  2. Pulse reuses an eligible completed scan from the prior 24 hours before queueing a new scan. Time comparisons use UTC instants. Use forceNewScan=true only when you need to bypass that reuse check; it does not bypass validation or throttles.
  3. For a quick check, use format=markdown and detail=tiny.
  4. For structured evidence, use format=json and detail=full.
  5. If you receive HTTP 202, read the returned statusUrl or poll /api/v1/pulse/status/<jobId>.
  6. If API fetch fails before headers, body, or status are visible, do not infer CertScore returned an error.

Recommended calls

GPT Action beta summary

GET /api/v1/pulse/gpt?url=https://kbdlab.io&format=markdown&detail=standard&wait=35

User-facing summary

GET /api/v1/pulse?url=https://kbdlab.io&format=markdown&detail=standard

Quick machine triage

GET /api/v1/pulse?url=https://kbdlab.io&detail=tiny

Evidence/deeper review

GET /api/v1/pulse?url=https://kbdlab.io&detail=full

Connectivity check

GET /api/v1/pulse-self-test

Health check

GET /api/v1/pulse-health

Markdown is best for conversational summaries. Tiny is best for badges, triage, and routing. Full is best for evidence review and coverage diagnostics. Self-test is best for deployment and agent connectivity checks.

OpenAPI / GPT Action beta agents

  1. If you support OpenAPI actions or tools, import https://certscore.ai/api/v1/openapi.chatgpt.json.
  2. Call getPulseForUrl with url, format=markdown, and detail=standard, and wait=35.
  3. Use detail=tiny for quick checks.
  4. Public GPT Action beta access uses latest-mode summaries and does not expose full detail or refresh scans. Link users to the CertScore report when they need more evidence.

How to interpret fetch failures

A successful CertScore Pulse response includes the diagnostic headers below. If a checker reports an internal fetch error and cannot show these headers, it did not successfully evaluate the CertScore application response.

Agent fetch limitations: Some agent environments may fail before receiving an HTTP response because of DNS, sandbox, TLS, proxy, or fetch-layer limitations. If a request fails before exposing an HTTP status, response body, or x-certscore-* diagnostic headers, do not conclude CertScore Pulse is unavailable. First try /api/v1/pulse-self-test, /api/v1/pulse-health, /api-pulse-agent-guide.txt, /.well-known/certscore-pulse, and /api/v1/openapi.chatgpt.json. If those also fail without HTTP status or CertScore diagnostic headers, report it as a client/network fetch limitation rather than a CertScore API result.

  • x-certscore-pulse: v1
  • x-certscore-route: pulse-self-test | pulse-health | openapi | openapi-chatgpt | discovery | pulse | pulse-status
  • x-certscore-request-id: <uuid>

Canonical endpoints

Expected public contract

  • Health, OpenAPI, and discovery endpoints return HTTP 200 with JSON.
  • Valid Pulse URL requests return a documented 200, 202, or 429 response.
  • Markdown requests may return HTTP 200 with text/markdown, or a documented JSON status/error shape.
  • Invalid URL input returns HTTP 400 JSON with error code invalid_url.
  • Unknown status jobs return HTTP 404 JSON with error code not_found.

Fallback workflow

  1. Open the health canary first and confirm the CertScore diagnostic headers.
  2. If the health canary is unavailable only inside one tool, treat that as a tool fetch/DNS failure.
  3. Use the Pulse markdown endpoint when a tool prefers readable text over JSON.
  4. Use the ChatGPT Action beta schema when configuring a Custom GPT beta action.
  5. Use the full JSON endpoint when structured finding, evidence, and review context are needed.

CertScore provides automated public-web observations for review. Results may be incomplete or contain errors. CertScore does not provide legal advice nor certify compliance. Always review the underlying evidence and consult qualified experts where appropriate.