API Playground
Sandbox examples only. Never paste owner API keys. Live calls use the public Compliance X-Ray endpoint only when you opt in with your URL.
POST /api/public/compliance-xray
Public X-Ray is rate-limited. Opt-in live calls use your URL only — never embed owner API keys.
curl -X POST https://hq.amberoneai.com/api/public/compliance-xray \
-H "Content-Type: application/json" \
-d '{"websiteUrl":"https://example.com"}'Sample response
{
"ok": true,
"data": {
"websiteUrl": "https://example.com",
"illustrative": true,
"note": "Illustrative demo payload — not live scan results.",
"modules": [
{
"id": "privacy",
"label": "Privacy / GPC",
"status": "checked"
},
{
"id": "accessibility",
"label": "Accessibility",
"status": "checked"
},
{
"id": "transparency",
"label": "AI Transparency",
"status": "checked"
}
],
"score": 72,
"legalNotice": "Scores assist operational readiness. Not a formal legal compliance determination."
}
}Optional live X-Ray
Calls rate-limited public `/api/public/compliance-xray` with the URL you provide.