API reference

All metered endpoints accept the key via X-API-Key header or ?api_key= query param.

POST /api/signup

No-KYC key. Returns api_key (0 credits).

curl -X POST https://lynx.thetempleofdoom.com/api/signup -H 'Content-Type: application/json' -d '{"email":"[email protected]"}'

POST /api/order

Create a BTCPay invoice. usd ∈ {2,5,10,20}. Returns checkout_link.

curl -X POST https://lynx.thetempleofdoom.com/api/order -H 'X-API-Key: sk-lynx-…' -H 'Content-Type: application/json' -d '{"usd":5}'

GET /api/me

Credits + usage for your key.

curl https://lynx.thetempleofdoom.com/api/me -H 'X-API-Key: sk-lynx-…'

POST /api/inspect/file

multipart upload → full inspection report. 1 credit

curl -X POST https://lynx.thetempleofdoom.com/api/inspect/file -H 'X-API-Key: sk-lynx-…' -F '[email protected]'

POST /api/steg/extract

steghide + zsteg extraction. Optional passphrase form field. 2 credits

curl -X POST https://lynx.thetempleofdoom.com/api/steg/extract -H 'X-API-Key: sk-lynx-…' -F '[email protected]' -F 'passphrase=secret'

POST /api/steg/crack

stegcracker passphrase recovery. 4 credits

curl -X POST https://lynx.thetempleofdoom.com/api/steg/crack -H 'X-API-Key: sk-lynx-…' -F '[email protected]'

POST /api/forensics/disk

Sleuth Kit on a disk image (mmls/fsstat/fls). 3 credits

curl -X POST https://lynx.thetempleofdoom.com/api/forensics/disk -H 'X-API-Key: sk-lynx-…' -F '[email protected]'

POST /api/recon/<tool>

nmap, subfinder, nuclei, theharvester, dnsrecon. Body {"target":"example.com"}.

curl -X POST https://lynx.thetempleofdoom.com/api/recon/nmap -H 'X-API-Key: sk-lynx-…' -H 'Content-Type: application/json' -d '{"target":"example.com"}'