Back to tools
API docs
The tools above are thin UIs over these same endpoints — call them directly if you'd rather script it.
DNS Lookup
Tool for querying A, AAAA, MX, TXT, NS and CNAME records of a domain
- Endpoint
- POST /api/dns-lookup
- Parameters
- { "domain": string }
- Rate limit
- 20 req/hour per IP
Example
curl -X POST https://amf.amfserver.duckdns.org/api/dns-lookup \
-H "Content-Type: application/json" \
-d '{"domain":"example.com"}'Certificates Checker
Tool for checking the validity and security of SSL/TLS certificates
- Endpoint
- POST /api/certificate-check
- Parameters
- { "host": string, "port": number }
- Rate limit
- 20 req/hour per IP
Example
curl -X POST https://amf.amfserver.duckdns.org/api/certificate-check \
-H "Content-Type: application/json" \
-d '{"host":"example.com","port":443}'Port Scanner
Tool for scanning TCP ports and verifying available services on remote hosts
- Endpoint
- POST /api/port-scan
- Parameters
- { "host": string, "ports": number[] } (max 100 ports)
- Rate limit
- 20 req/hour per IP
Example
curl -X POST https://amf.amfserver.duckdns.org/api/port-scan \
-H "Content-Type: application/json" \
-d '{"host":"example.com","ports":[80,443]}'HTTP Headers Validator
Tool for validating HTTP security headers of any website
- Endpoint
- GET /api/validate-headers
- Parameters
- ?url=https://example.com
- Rate limit
- unauthenticated, best-effort
Example
curl "https://amf.amfserver.duckdns.org/api/validate-headers?url=https://example.com"Web Discovery
Tool for discovering hidden paths and directories on a web server
- Endpoint
- GET /api/web-discovery
- Parameters
- ?baseUrl=https://example.com&path=/
- Rate limit
- 10 req/hour per IP
Example
curl "https://amf.amfserver.duckdns.org/api/web-discovery?baseUrl=https://example.com&path=/"Password Checker
Tool for checking password strength and security
- Endpoint
- POST /api/check-password
- Parameters
- { "password": string }
- Rate limit
- unauthenticated, best-effort
Example
curl -X POST https://amf.amfserver.duckdns.org/api/check-password \
-H "Content-Type: application/json" \
-d '{"password":"correcthorsebatterystaple"}'