Signup Url

Return the monitoring signup hand-off for body.domain.

The REST twin of the start_monitoring_signup MCP tool, running the SAME pure core (mcp_server/signup.py::build_signup_url). It performs no I/O of any kind — no DNS, no store read, no mail: it canonicalizes the domain and assembles two URLs rooted at settings.public_base_url. Nothing is created until the human opens signup_url and signs in there themselves.

No suppression check, deliberately — the same decision signup.py documents for the tool, not an oversight. The valve is a store read, and the no-I/O property is what makes this surface's closed-world claim true; nothing leaks by skipping it, because suppression withholds a report and both returned URLs still refuse on their own (/scan/{domain} is served by the suppression-aware pipeline, and /start publishes nothing about the domain — it prefills a name the caller already had).

Anonymous allowed. ToolInputError → 422 with the core's own detail, matching the normalize_domain contract the other v1 routes answer with.