How it works
Submit a profile URL. Tumban analyses the profile and its external footprint, then returns the result either by webhook or by polling.1
Submit
Send the profile URL to
POST /api/v2/scan/deep for a full scan, or
POST /api/v2/scan/quick for a faster, cheaper profile-only scan.
You receive a scan_id immediately and the scan begins processing
in the background.2
Wait for the result
Tumban delivers the triage report to your
callback_url, or you can poll
GET /api/v2/scans/{scan_id} until status is no longer processing.3
Triage
Use the
recommendation (no_flags, review_low, review_medium,
review_high) plus the evidence_index to route the profile to your
review queue.Where to start
Quickstart
Mint an API key, submit a scan, and read the result in under five
minutes.
Authentication
API keys for server-to-server use, or session tokens for dashboard
sessions.
API reference
Endpoint-by-endpoint reference, derived from the live handlers.
Webhooks
Payload format, HMAC verification, and retry behaviour.