Solution

Scraping & crawling

The web, read for you: one page, its images, a whole site, its reviews, its stack. Every fetch goes through a guard that refuses private addresses, so a URL from a user can never reach anything it should not.

What is under this key

Scrape

A page, its images, its favicon, Google reviews, the website's technology, a CEIDG record, a moderation verdict, a full web scraper.

Crawl

Basic, deep, or images only; limits on depth and pages; a structure you can index.

Fetch

Safe fetch, stealth fetch, CORS proxy, cache accelerator, RSS and XML to JSON, CSV streams.

Capture

Screenshots and PDFs of any URL, from a real browser.

Structure

What came back, parsed: text, files, e-mails, JSON.

Remember

What a crawl fetched stays on the platform; the website database behind it is internal, the Crawl endpoints are how you read it.

What is guarded

Hostnames are resolved before connecting; any address outside the public unicast range — v4, v6 or v4-mapped — is refused; every redirect hop is re-validated; response sizes are capped. Puppeteer routes document their residual DNS-rebinding window instead of denying it. The security page has the detail.

All Scrape endpoints

POST/v1/scrape/favicon1 token

{ "url": "https://castomapi.com" }

{
  "status": "success",
  "favicons": [
    { "href": "https://castomapi.com/assets/brand/mark.svg", "type": "image/svg+xml" },
    { "href": "https://castomapi.com/favicon.ico", "sizes": "16x16 32x32 48x48" }
  ],
  "tokensDeducted": 1
}