Registry · Capabilities · rankscale.ai
Capability registryWhat rankscale.ai declares an agent can do
Measured 2026-11-02 10:36 UTC from the declarations the site publishes (record 3zb5pc2mzj). Each capability is shown as declared, under the policy class that decides whether anything may call it, beside what a call observed.
Declared versus observed
| Capability | Policy class | Declared | Observed |
|---|---|---|---|
| createMetricsReport openapi · POST · https://rankscale.ai/v1/metrics/report | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createSearchTermsReport openapi · POST · https://rankscale.ai/v1/metrics/search-terms-report | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createSentimentReport openapi · POST · https://rankscale.ai/v1/metrics/sentiment | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createShoppingReport openapi · POST · https://rankscale.ai/v1/metrics/shopping | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createAdsReport openapi · POST · https://rankscale.ai/v1/metrics/ads | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createSourcesReport openapi · POST · https://rankscale.ai/v1/metrics/sources | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createFanoutReport openapi · POST · https://rankscale.ai/v1/metrics/fanout | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createLocalResultsReport openapi · POST · https://rankscale.ai/v1/metrics/local-results | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createFollowUpFormsReport openapi · POST · https://rankscale.ai/v1/metrics/follow-up-forms | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listExecutions openapi · POST · https://rankscale.ai/v1/metrics/executions | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createCitationsReport openapi · POST · https://rankscale.ai/v1/metrics/citations | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listBrands openapi · GET · https://rankscale.ai/v1/metrics/brands | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createBrand openapi · POST · https://rankscale.ai/v1/metrics/brands | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| patchBrand openapi · PATCH · https://rankscale.ai/v1/metrics/brands/{brandId} | Unknown never called automatically | PATCH with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| deleteBrand openapi · DELETE · https://rankscale.ai/v1/metrics/brands/{brandId} | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| getBrandFalsePositiveAnalysis openapi · GET · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| runBrandFalsePositiveAnalysis openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| recalculateBrandFalsePositiveAnalysis openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/recalculate | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| addBrandAnalysisBrandName openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/brand-names | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| removeBrandAnalysisBrandName openapi · DELETE · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/brand-names | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| applyBrandAnalysisLabels openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/labels | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listSearchTerms openapi · GET · https://rankscale.ai/v1/metrics/search-terms | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createSearchTerm openapi · POST · https://rankscale.ai/v1/metrics/search-terms | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| patchSearchTermsBatch openapi · PATCH · https://rankscale.ai/v1/metrics/search-terms | Unknown never called automatically | PATCH with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| patchSearchTerm openapi · PATCH · https://rankscale.ai/v1/metrics/search-terms/{searchTermId} | Unknown never called automatically | PATCH with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| deleteSearchTerm openapi · DELETE · https://rankscale.ai/v1/metrics/search-terms/{searchTermId} | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| activateSearchTerm openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/activate | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| deactivateSearchTerm openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/deactivate | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| runSearchTerm openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/run | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listTopics openapi · GET · https://rankscale.ai/v1/metrics/topics | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createTopic openapi · POST · https://rankscale.ai/v1/metrics/topics | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| patchTopic openapi · PATCH · https://rankscale.ai/v1/metrics/topics/{topicId} | Unknown never called automatically | PATCH with no declared reversibility auth: apiKey+http_bearer · required inputs: 3 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| deleteTopic openapi · DELETE · https://rankscale.ai/v1/metrics/topics/{topicId} | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| getCredits openapi · GET · https://rankscale.ai/v1/metrics/credits | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listPromptResearches openapi · GET · https://rankscale.ai/v1/metrics/prompt-researches | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createPromptResearch openapi · POST · https://rankscale.ai/v1/metrics/prompt-researches | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| getPromptResearch openapi · GET · https://rankscale.ai/v1/metrics/prompt-researches/{promptResearchId} | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listShareLinkBrands openapi · GET · https://rankscale.ai/shareLinksAPI/brands | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 0 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| listShareLinks openapi · GET · https://rankscale.ai/shareLinksAPI/share-links | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| createShareLink openapi · POST · https://rankscale.ai/shareLinksAPI/share-links | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| updateShareLink openapi · PATCH · https://rankscale.ai/shareLinksAPI/share-links/{shareId} | Unknown never called automatically | PATCH with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| deleteShareLink openapi · DELETE · https://rankscale.ai/shareLinksAPI/share-links/{shareId} | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| extendShareLink openapi · POST · https://rankscale.ai/shareLinksAPI/share-links/{shareId}/extend | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| mcpStreamableHttp openapi · POST · https://rankscale.ai/mcp | Unknown never called automatically | POST with no declared reversibility auth: oauth2 · required inputs: 1 | not attempted requires oauth2: never called without the operator's own credentials |
Where the declaration and the call disagree
None: every capability that was called answered as declared.
Signed certificate
This page’s rows, signed by the observer’s Ed25519 key: every capability’s id, endpoint, safety class, policy class and observed state, the declaration hashes and the record’s sealed manifest. The certificate is derived from the record alone, so the same record always yields the same id.
alg Ed25519 · kid 1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps
sig BVGReTnofY0Dwv2ihCo4R3ckpZntrpVkHvCNUtw_KQKjAzC3mwRUKlxTEPEOLR2KmzGGF16PBL2WQbRGtI_HBg
The certificate as JSON · verify it now · the key directory · machine-readability certificate
To verify it yourself: SHA-256 the certificate object as canonical JSON (keys sorted, no whitespace); the hex digest must equal certificate_sha256 and the id; then check the Ed25519 signature over "crawlcheck-capability-certificate-v1\n" followed by that hex digest, with the key in the directory whose RFC 7638 thumbprint is the kid.
Policy classes
| Policy class | Called automatically? | Rule |
|---|---|---|
| Public read-only public_read_only | yes, to verify | May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin. |
| Authenticated read-only authenticated_read_only | never | Never called by CrawlCheck. An agent needs the user's own credentials and consent. |
| Reversible write reversible_write | never | Never invoked automatically. Needs the owner's written authorisation and a test account. |
| Irreversible write irreversible_write | never | Never invoked automatically. Deletes or changes something that cannot be undone. |
| Financial financial | never | Never invoked automatically. Moves money or creates a charge. |
| External communication external_communication | never | Never invoked automatically. Sends a message, email or notification to someone. |
| Identity and accounts identity | never | Never invoked automatically. Creates, signs in to or changes an account or credential. |
| Unknown unknown | never | Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case. |
| Metadata metadata | never | Nothing to invoke: a listing, a server card or a skill file, not an operation. |