API reference

Send a file — or a link to one — and get back a malware verdict and, optionally, a prompt-injection verdict. One endpoint does the work. Prefer to start from working code? The examples in seven languages are the fastest way in.

Authenticate with your API key as a bearer token: Authorization: Bearer upscan_…

Create one on your account page. It is shown once — only its SHA-256 is stored, so it cannot be recovered. If you lose it, regenerate the key; the old one stops working immediately.

To try a request below, press Authorize and paste your key. Requests go to the live API and count against your monthly allowance.