# PhishClean API for developers

> Integrate PhishClean security tools into your app. Free tier: 30 req/hr. Pro, Business, and Enterprise plans with higher limits and API key management.

Canonical: https://www.phishclean.com/developers
Last updated: 2026-09-21

Integrate phishing detection, password analysis, email scanning, backlink impersonation detection, and more into your app. Start with the free developer tier and upgrade later for higher limits.

Free

$0

forever

- 30 requests/hour
- All 8 endpoints
- No API key needed
- IP-based rate limiting

Popular

Pro

$19

/month

- 2,000 requests/hour
- All 8 endpoints
- API key authentication
- Usage dashboard

Business

$49

/month

- 25,000 requests/hour
- All 8 endpoints
- Webhook support
- Bulk scanning

Enterprise

$700

/year

- Unlimited requests
- All 8 endpoints
- SLA guarantee
- Dedicated support

## Sign up for API access

Already have an account? Log in

## API keys free

Your new API key (copy it now — it won't be shown again):

No API keys yet. Generate one above.

## Quick start

Use any HTTP client. No SDK required.

# Check a URL for phishing (free, no key needed) curl -X POST https://www.phishclean.com/api/v1/check-link \ -H "Content-Type: application/json" \ -d '{"url": "https://paypal-secure.xyz/login"}' # With API key for higher rate limits curl -X POST https://www.phishclean.com/api/v1/check-link \ -H "Content-Type: application/json" \ -H "Authorization: Bearer pk_live_your_key_here" \ -d '{"url": "https://paypal-secure.xyz/login"}'

# Check password strength curl -X POST https://www.phishclean.com/api/v1/check-password \ -H "Content-Type: application/json" \ -d '{"password": "Summer2024!"}' # Scan email for phishing curl -X POST https://www.phishclean.com/api/v1/check-email \ -H "Content-Type: application/json" \ -d '{"body": "Dear customer, verify your account immediately or it will be suspended..."}' # Scan code for leaked secrets curl -X POST https://www.phishclean.com/api/v1/scan-secrets \ -H "Content-Type: application/json" \ -d '{"source": "const key = \"AKIA1234567890ABCDEF\""}' # Detect backlink impersonation on a suspicious page curl -X POST https://www.phishclean.com/api/v1/analyze-backlinks \ -H "Content-Type: application/json" \ -d '{"url": "https://paypal-secure.xyz/login", "html": "<form><input type=\"password\"></form><a href=\"https://www.paypal.com/privacy\">Privacy</a>"}'

[Full API reference](https://www.phishclean.com/api/v1) · MCP Server (npm): `npm i phishclean-mcp` · [GitHub](https://github.com/chidhu07/phishclean-mcp)

Last updated: 21 September 2026