How it works
Submit a profile URL. Tumban analyses the profile and its external footprint, then returns the result either by webhook or by polling.Submit
Send the profile URL to
POST /api/v2/scan/deep for a full scan, or
POST /api/v2/scan/quick for a faster, cheaper profile-only scan.
You receive a scan_id immediately and the scan begins processing
in the background.Wait for the result
Tumban delivers the triage report to your
callback_url, or you can poll
GET /api/v2/scans/{scan_id} until status is no longer processing.Where to start
Quickstart
Mint an API key, submit a scan, and read the result in under five
minutes.
Authentication
API keys for server-to-server use, or session tokens for dashboard
sessions.
API reference
Endpoint-by-endpoint reference, derived from the live handlers.
Webhooks
Payload format, HMAC verification, and retry behaviour.

