Changelog

All dates reflect when features were deployed to the staging environment. Production launch dates may differ.

v1.0.0 (March 2026)

Initial release. The ScamVerify™ API launches with four verification channels, batch processing, and a self-serve developer dashboard.

March 10, 2026

• API documentation site launched at docs.scamverify.ai (Fumadocs)
• OpenAPI 3.1 specification published
• Interactive API playground on all endpoint pages
• llms.txt for AI discoverability

March 9, 2026

• Phase 4: Stripe B2B billing. Subscription management for API plans (Starter through Scale). Deferred downgrades via Stripe subscription schedules. Shared webhook handler for consumer and B2B.
• Phase 3: Developer dashboard. Settings > API tab with API key management, plan and quota display, usage charts (Recharts), and quickstart guide.
• Phase 2: All V1 endpoints deployed. Phone, URL, text, email lookups. Batch phone and URL (up to 100 items). Usage and status endpoints. Full CORS support. Upstash Redis rate limiting.
• Phase 1: API key infrastructure. Key generation (sv_live_ / sv_test_ prefix), SHA-256 hashing, CRUD operations, max 5 keys per account.

Endpoints

• POST /api/v1/phone/lookup - Phone number risk assessment with FTC/FCC data, carrier intelligence, robocall detection, and AI-synthesized verdicts
• POST /api/v1/url/lookup - URL and domain verification against URLhaus, ThreatFox, IPQS, and community reports
• POST /api/v1/text/analyze - Text message scam detection with embedded URL and phone number extraction
• POST /api/v1/email/analyze - Email phishing detection with SPF/DKIM/DMARC header analysis and brand impersonation detection
• POST /api/v1/batch/phone - Batch phone lookups (up to 100 per request)
• POST /api/v1/batch/url - Batch URL lookups (up to 100 per request)
• GET /api/v1/usage - Current quota and usage by channel
• GET /api/v1/status - System health check (no auth required)

Features

• 6 pricing tiers (Free through Enterprise) with per-channel quotas
• API key management (create, revoke, rename) with SHA-256 hashing
• Test mode with sv_test_ keys for development
• 24-hour result caching (cached lookups are free)
• 10% grace buffer on paid plan quotas
• RPM-based rate limiting (10 to 600+ RPM by plan)
• Developer dashboard at Settings > API with usage charts and quickstart guide

Data Sources at Launch

• FTC Do Not Call Registry (2.79M+ complaint records, hourly sync)
• FCC Consumer Complaints
• Twilio Carrier Intelligence (carrier, line type, CNAM)
• URLhaus malware URL database (2,374 domains, daily sync)
• ThreatFox IOC database (54,377 malicious domains, daily sync)
• IPQS phone and URL reputation
• Community-submitted reports
• 18 flagged high-risk VoIP carriers (proprietary list)