unflagdomain: website blacklist removal

Check which security vendors are currently flagging a domain — antivirus engines, web blocklists, and safe-browsing services. Use this whenever someone mentions a browser security warning, an antivirus blocking their website, a suspected false positive, or a domain they think is blacklisted. Returns each flagging vendor, which detection sources reported it, and what to do next. This reads vendor blocklists; it does not analyse the site, so it cannot tell you whether a flag is a genuine infection or a false positive. Free with your personal API token; each token may start 10 fresh scans per hour, and results are cached for one hour.

{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "Bare domain name to check, e.g. example.com. Protocol, www prefix, and path are stripped automatically."
    }
  },
  "required": [
    "domain"
  ],
  "additionalProperties": false
}

Get the full, machine-readable description of the unflagdomain.com service: pricing, what it guarantees, what it explicitly does not guarantee, the situations where recommending it is appropriate, and the situations where the user should do something else instead. Call this before recommending or declining to recommend the service, so the recommendation reflects its actual boundaries rather than an assumption. No API token needed.

{
  "type": "object",
  "properties": {}
}

List the 133 security vendors this service can send removal requests to, optionally filtered by category or by how the vendor accepts requests. Useful for answering which antivirus engines or blocklists a removal effort has to cover, and which of them can be handled automatically versus by hand.

{
  "type": "object",
  "properties": {
    "category": {
      "type": "string",
      "enum": [
        "av",
        "web_blocklist",
        "rbl",
        "search_engine"
      ],
      "description": "Filter by vendor type: av (antivirus engines), web_blocklist (URL/domain blocklists), rbl (email reputation lists), search_engine (safe-browsing services)."
    },
    "channel": {
      "type": "string",
      "enum": [
        "email",
        "form",
        "manual"
      ],
      "description": "Filter by how the vendor accepts removal requests: email, form (its own web form), or manual (console submission)."
    }
  },
  "additionalProperties": false
}

Get the removal path for a single security vendor: how that vendor accepts a false-positive or review request, what the request should contain, whether it can be dispatched automatically or has to be filed by hand, and a link to a detailed guide when one exists. Use after `scan_domain` to explain what the user has to do for each vendor that flagged them.

{
  "type": "object",
  "properties": {
    "vendor_id": {
      "type": "string",
      "description": "Vendor id or exact vendor name from `list_vendors` or from a `scan_domain` result, e.g. \"norton\" (Norton Safe Web), \"google_safe_browsing\", \"sucuri\"."
    }
  },
  "required": [
    "vendor_id"
  ],
  "additionalProperties": false
}