API for developers and agents
Everything in the dashboard is available as a JSON API, described by an OpenAPI spec (interactive docs). That makes it straightforward to call from scripts, security tooling, or AI agents that can read OpenAPI.
Endpoints
| Request | What it does |
|---|---|
GET /api/v1/scan?domain=example.com | One-time scan; works without a key (per-IP limit) |
GET /api/v1/domains | Your monitored domains with open finding counts |
POST /api/v1/domains | Start monitoring a domain |
GET /api/v1/findings?since=<unix>&min_score=60 | New findings since your last poll |
GET /api/v1/findings/{id} | One finding with its history |
POST /api/v1/findings/{id}/feedback | Mark mine, dismissed or watch |
POST /api/v1/webhooks/test | Send a signed test event to your webhook |
Example
curl -H "Authorization: Bearer $LG_KEY" \ "https://lookalikeguard.com/api/v1/findings?since=1760000000&min_score=60"
Webhooks
Each webhook POST carries LookalikeGuard-Signature: t=<unix>,v1=<hex> where hex is HMAC-SHA256 of "<t>.<raw body>" with your webhook secret. Compare in constant time and reject timestamps older than five minutes.
Limits
Requests per minute: Free 10, Solo 60, Team 120, Agency 300. Responses include X-RateLimit-Limit and X-RateLimit-Remaining.
What it does not do
LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.