Partner API and MCP
Pull reports and insurance packs into your PSA, RMM or assistant.
JSON over HTTPS with a bearer key, and an MCP server for AI assistants. Sandbox keys (sbx_…) return demo clients; partner keys return your clients once your agreement is active.
REST endpoints
| Method and path | Returns |
|---|---|
GET /api/partner/v1/clients | Your client organizations: id, name, vertical, domain. |
GET /api/partner/v1/clients/{id}/report | Latest security report: sections, rows with pass/fail status, score, checked time. |
GET /api/partner/v1/clients/{id}/insurance-pack | Cyber-insurance questionnaire pack: each question, the answer from scan evidence or "MSP to answer", and the evidence to attach. |
GET /api/partner/v1/clients/{id}/qbr | QBR summary: score, checks passed, the top items to fix. |
GET /api/insurance_pack?domain=example.com | Free, no key: an insurance pack built from a passive scan of any public domain. Ten per hour per address. |
GET /api/scan_domain?domain=example.com | Free, no key: the passive scan itself. |
Send the key as Authorization: Bearer <key>. Errors are JSON: {"error": {"code": "...", "message": "..."}} with status 401 for a missing or expired key and 404 for an unknown client. Machine-readable schema: /openapi.json.
MCP server
Streamable HTTP at https://security.eliteaiempire.com/mcp. Tools: scan_domain (passive scan) and insurance_pack (questionnaire pack from a passive scan). Both are read-only and never send attack payloads. Server card: /.well-known/mcp.json.
{"mcpServers": {"empire-security": {"type": "http", "url": "https://security.eliteaiempire.com/mcp"}}}Example
curl -s "https://security.eliteaiempire.com/api/insurance_pack?domain=example.com" | jq '.items[] | {question, answer}'