CrawlCheck

Registry · Capabilities · rankscale.ai

Capability registry

What rankscale.ai declares an agent can do

Measured 2026-11-02 10:36 UTC from the declarations the site publishes (record 3zb5pc2mzj). Each capability is shown as declared, under the policy class that decides whether anything may call it, beside what a call observed.

44declared
0public read-only
0called and verified
0declared ≠ observed
openapiprotocols
Authenticated read-only: 9Irreversible write: 5Unknown: 30
Authenticated read-only 9 · Irreversible write 5 · Unknown 30

Declared versus observed

CapabilityPolicy classDeclaredObserved
createMetricsReport
openapi · POST · https://rankscale.ai/v1/metrics/report
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createSearchTermsReport
openapi · POST · https://rankscale.ai/v1/metrics/search-terms-report
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createSentimentReport
openapi · POST · https://rankscale.ai/v1/metrics/sentiment
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createShoppingReport
openapi · POST · https://rankscale.ai/v1/metrics/shopping
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createAdsReport
openapi · POST · https://rankscale.ai/v1/metrics/ads
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createSourcesReport
openapi · POST · https://rankscale.ai/v1/metrics/sources
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createFanoutReport
openapi · POST · https://rankscale.ai/v1/metrics/fanout
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createLocalResultsReport
openapi · POST · https://rankscale.ai/v1/metrics/local-results
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createFollowUpFormsReport
openapi · POST · https://rankscale.ai/v1/metrics/follow-up-forms
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listExecutions
openapi · POST · https://rankscale.ai/v1/metrics/executions
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createCitationsReport
openapi · POST · https://rankscale.ai/v1/metrics/citations
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listBrands
openapi · GET · https://rankscale.ai/v1/metrics/brands
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createBrand
openapi · POST · https://rankscale.ai/v1/metrics/brands
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
patchBrand
openapi · PATCH · https://rankscale.ai/v1/metrics/brands/{brandId}
Unknown
never called automatically
PATCH with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
deleteBrand
openapi · DELETE · https://rankscale.ai/v1/metrics/brands/{brandId}
Irreversible write
never called automatically
HTTP DELETE
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
getBrandFalsePositiveAnalysis
openapi · GET · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
runBrandFalsePositiveAnalysis
openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
recalculateBrandFalsePositiveAnalysis
openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/recalculate
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
addBrandAnalysisBrandName
openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/brand-names
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
removeBrandAnalysisBrandName
openapi · DELETE · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/brand-names
Irreversible write
never called automatically
HTTP DELETE
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
applyBrandAnalysisLabels
openapi · POST · https://rankscale.ai/v1/metrics/brands/{brandId}/analysis/labels
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listSearchTerms
openapi · GET · https://rankscale.ai/v1/metrics/search-terms
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createSearchTerm
openapi · POST · https://rankscale.ai/v1/metrics/search-terms
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
patchSearchTermsBatch
openapi · PATCH · https://rankscale.ai/v1/metrics/search-terms
Unknown
never called automatically
PATCH with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
patchSearchTerm
openapi · PATCH · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}
Unknown
never called automatically
PATCH with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
deleteSearchTerm
openapi · DELETE · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}
Irreversible write
never called automatically
HTTP DELETE
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
activateSearchTerm
openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/activate
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
deactivateSearchTerm
openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/deactivate
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
runSearchTerm
openapi · POST · https://rankscale.ai/v1/metrics/search-terms/{searchTermId}/run
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listTopics
openapi · GET · https://rankscale.ai/v1/metrics/topics
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createTopic
openapi · POST · https://rankscale.ai/v1/metrics/topics
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
patchTopic
openapi · PATCH · https://rankscale.ai/v1/metrics/topics/{topicId}
Unknown
never called automatically
PATCH with no declared reversibility
auth: apiKey+http_bearer · required inputs: 3
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
deleteTopic
openapi · DELETE · https://rankscale.ai/v1/metrics/topics/{topicId}
Irreversible write
never called automatically
HTTP DELETE
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
getCredits
openapi · GET · https://rankscale.ai/v1/metrics/credits
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listPromptResearches
openapi · GET · https://rankscale.ai/v1/metrics/prompt-researches
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createPromptResearch
openapi · POST · https://rankscale.ai/v1/metrics/prompt-researches
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
getPromptResearch
openapi · GET · https://rankscale.ai/v1/metrics/prompt-researches/{promptResearchId}
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listShareLinkBrands
openapi · GET · https://rankscale.ai/shareLinksAPI/brands
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 0
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
listShareLinks
openapi · GET · https://rankscale.ai/shareLinksAPI/share-links
Authenticated read-only
never called automatically
HTTP GET behind apiKey+http_bearer
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
createShareLink
openapi · POST · https://rankscale.ai/shareLinksAPI/share-links
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 1
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
updateShareLink
openapi · PATCH · https://rankscale.ai/shareLinksAPI/share-links/{shareId}
Unknown
never called automatically
PATCH with no declared reversibility
auth: apiKey+http_bearer · required inputs: 2
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
deleteShareLink
openapi · DELETE · https://rankscale.ai/shareLinksAPI/share-links/{shareId}
Irreversible write
never called automatically
HTTP DELETE
auth: apiKey+http_bearer · required inputs: 1
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
extendShareLink
openapi · POST · https://rankscale.ai/shareLinksAPI/share-links/{shareId}/extend
Unknown
never called automatically
POST with no declared reversibility
auth: apiKey+http_bearer · required inputs: 1
not attempted
requires apiKey+http_bearer: never called without the operator's own credentials
mcpStreamableHttp
openapi · POST · https://rankscale.ai/mcp
Unknown
never called automatically
POST with no declared reversibility
auth: oauth2 · required inputs: 1
not attempted
requires oauth2: never called without the operator's own credentials

Where the declaration and the call disagree

None: every capability that was called answered as declared.

Signed certificate

This page’s rows, signed by the observer’s Ed25519 key: every capability’s id, endpoint, safety class, policy class and observed state, the declaration hashes and the record’s sealed manifest. The certificate is derived from the record alone, so the same record always yields the same id.

certificate_id ccap1:6e60af7a82d6f21f08274ec127f2fbb86b5aabfe59b33216cdce4bc3464df41f
alg Ed25519 · kid 1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps
sig BVGReTnofY0Dwv2ihCo4R3ckpZntrpVkHvCNUtw_KQKjAzC3mwRUKlxTEPEOLR2KmzGGF16PBL2WQbRGtI_HBg

The certificate as JSON · verify it now · the key directory · machine-readability certificate

To verify it yourself: SHA-256 the certificate object as canonical JSON (keys sorted, no whitespace); the hex digest must equal certificate_sha256 and the id; then check the Ed25519 signature over "crawlcheck-capability-certificate-v1\n" followed by that hex digest, with the key in the directory whose RFC 7638 thumbprint is the kid.

Policy classes

Policy classCalled automatically?Rule
Public read-only
public_read_only
yes, to verifyMay be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin.
Authenticated read-only
authenticated_read_only
neverNever called by CrawlCheck. An agent needs the user's own credentials and consent.
Reversible write
reversible_write
neverNever invoked automatically. Needs the owner's written authorisation and a test account.
Irreversible write
irreversible_write
neverNever invoked automatically. Deletes or changes something that cannot be undone.
Financial
financial
neverNever invoked automatically. Moves money or creates a charge.
External communication
external_communication
neverNever invoked automatically. Sends a message, email or notification to someone.
Identity and accounts
identity
neverNever invoked automatically. Creates, signs in to or changes an account or credential.
Unknown
unknown
neverNever invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case.
Metadata
metadata
neverNothing to invoke: a listing, a server card or a skill file, not an operation.