---
title: "Look up a config"
method: POST
path: "/config-registry/lookup"
tags: ["Config Registry"]
---

# Look up a config

`POST /config-registry/lookup`

## Request

- Base URL: `https://api.onkernel.com`
- URL: `https://api.onkernel.com/config-registry/lookup`
- Auth: HTTP bearer

Returns current global knowledge without resolving DNS, creating an analysis, or updating config registry data.

## Request body

- ConfigRegistryLookupRequest
  - `allowed_proxy_countries` string[]: ISO 3166 country codes Kernel may use when returning a proxy configuration. When omitted, Kernel uses its default country selection.
  - `url` string, uri, required: Public HTTP(S) URL to look up.

## Response `200`

Current recommendation, or a null recommendation when no eligible knowledge exists.

- ConfigRegistryLookupResponse
  - `guidance` string, nullable: Short advisory markdown to facilitate navigating this target. Returned even when no configuration reached the target, since knowing what prevented success is useful without a configuration. Not verified against this target. Null when nothing applicable was observed or no notes exist.
  - `recommendation` union, required: A recommendation or a structured no-recommendation result.
    - ConfigRegistryRecommendation
      - `browser` ConfigRegistryBrowser, required: Browser settings that can be passed directly to `POST /browsers`.
        - `gpu` boolean, required
        - `headless` boolean, required
        - `stealth` boolean, required
        - `viewport` BrowserViewport, required: Initial browser window size in pixels with optional refresh rate. If omitted, image defaults apply (1920x1080@25). For GPU images, the default is 1920x1080@60. Arbitrary viewport dimensions and refresh rates are accepted. Known-good presets include: 2560x1440@10, 1920x1080@25, 1920x1200@25, 1440x900@25, 1280x800@60, 1024x768@60, 1200x800@60, 768x1024@60, 390x844@60. For GPU images, recommended presets use one of these resolutions with refresh rates 60, 30, 25, or 10: 800x600, 960x720, 1024x576, 1024x768, 1152x648, 1200x800, 1280x720, 1368x768, 1440x900, 1600x900, 1920x1080, 1920x1200, 390x844, 360x250, 768x1024, 800x1600. Viewports outside this list may exhibit unstable live view or recording behavior. If refresh_rate is not provided, it will be automatically determined based on the resolution (higher resolutions use lower refresh rates to keep bandwidth reasonable).
          - `height` integer, required: Browser window height in pixels. Any positive integer is accepted.
          - `refresh_rate` integer: Display refresh rate in Hz. Any positive integer is accepted; if omitted, GPU browsers default to 60 and other browsers derive it from width and height.
          - `width` integer, required: Browser window width in pixels. Any positive integer is accepted.
      - `evidence` ConfigRegistryEvidence, required
        - `accessed` integer, required
        - `blocked` integer, required
        - `inconclusive` integer, required
        - `last_observed_at` string, date-time, required: Most recent contributing observation. Recommendations remain eligible regardless of age and can be returned while a new analysis refreshes them.
        - `last_supported_at` string, date-time, nullable: Most recent contributing run whose evidence supported recommending this configuration. Omitted when no individual run independently met the recommendation threshold.
        - `run_count` integer, required
        - `sample_size` integer, required: Number of judged trials.
        - `success_rate` number, required: Accessed trials divided by judged trials. Inconclusive trials are excluded.
      - `match_scope` 'exact' | 'host' | 'domain', required: Specificity of knowledge matched for this recommendation. Exact matches use knowledge for the requested target; host and domain matches use broader fallback knowledge.
      - `matched_target` string, required: Target value that supplied the recommendation.
      - `proxy` union, required: Proxy recipe for the recommended browser.
        - ConfigRegistryDirectProxy: Direct egress recipe. Pass `{ "mode": "direct" }` as the browser's `proxy`.
          - `mode` 'direct', required
        - ConfigRegistryManagedProxy: Managed proxy recipe. `create` is a non-idempotent `POST /proxies` payload: create the resource once, retain its ID, and reuse that ID as the browser's `proxy.id`. Do not submit this recipe before every browser session.
          - `create` ProxyCreateRequest, required: Configuration for routing traffic through a proxy.
            - `bypass_hosts` string[]: Hostnames that should bypass the parent proxy and connect directly.
            - `config` union: Configuration specific to the selected proxy `type`.
              - …
            - `name` string: Readable name of the proxy.
            - `protocol` 'http' | 'https': Protocol to use for the proxy connection.
            - `type` 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom', required: Proxy type to use. In terms of quality for avoiding bot-detection, from best to worst: `mobile` > `residential` > `isp`. `datacenter` is deprecated; use `isp` instead. Datacenter proxy creation remains supported for backward compatibility.
          - `mode` 'managed', required
      - `type` 'recommendation', required
    - ConfigRegistryNoRecommendation
      - `code` 'proxy_restricted' | 'target_not_evaluable' | 'no_working_configuration' | 'inconclusive', required: Machine-readable reason Kernel cannot currently provide a config recommendation.
      - `message` string, required: Human-readable explanation suitable for display.
      - `type` 'no_recommendation', required
  - `target` ConfigRegistryTarget, required
    - `domain` string, required: Registrable domain.
    - `host` string, required: Full hostname, including subdomain.
    - `normalized` string, required: Exact normalized scheme, host, port, and path used for lookup.
  - `working_configurations` ConfigRegistryRecommendation[], required: Working configurations for the target, ordered with the recommended configuration first.
    - `browser` ConfigRegistryBrowser, required: Browser settings that can be passed directly to `POST /browsers`.
      - `gpu` boolean, required
      - `headless` boolean, required
      - `stealth` boolean, required
      - `viewport` BrowserViewport, required: Initial browser window size in pixels with optional refresh rate. If omitted, image defaults apply (1920x1080@25). For GPU images, the default is 1920x1080@60. Arbitrary viewport dimensions and refresh rates are accepted. Known-good presets include: 2560x1440@10, 1920x1080@25, 1920x1200@25, 1440x900@25, 1280x800@60, 1024x768@60, 1200x800@60, 768x1024@60, 390x844@60. For GPU images, recommended presets use one of these resolutions with refresh rates 60, 30, 25, or 10: 800x600, 960x720, 1024x576, 1024x768, 1152x648, 1200x800, 1280x720, 1368x768, 1440x900, 1600x900, 1920x1080, 1920x1200, 390x844, 360x250, 768x1024, 800x1600. Viewports outside this list may exhibit unstable live view or recording behavior. If refresh_rate is not provided, it will be automatically determined based on the resolution (higher resolutions use lower refresh rates to keep bandwidth reasonable).
        - `height` integer, required: Browser window height in pixels. Any positive integer is accepted.
        - `refresh_rate` integer: Display refresh rate in Hz. Any positive integer is accepted; if omitted, GPU browsers default to 60 and other browsers derive it from width and height.
        - `width` integer, required: Browser window width in pixels. Any positive integer is accepted.
    - `evidence` ConfigRegistryEvidence, required
      - `accessed` integer, required
      - `blocked` integer, required
      - `inconclusive` integer, required
      - `last_observed_at` string, date-time, required: Most recent contributing observation. Recommendations remain eligible regardless of age and can be returned while a new analysis refreshes them.
      - `last_supported_at` string, date-time, nullable: Most recent contributing run whose evidence supported recommending this configuration. Omitted when no individual run independently met the recommendation threshold.
      - `run_count` integer, required
      - `sample_size` integer, required: Number of judged trials.
      - `success_rate` number, required: Accessed trials divided by judged trials. Inconclusive trials are excluded.
    - `match_scope` 'exact' | 'host' | 'domain', required: Specificity of knowledge matched for this recommendation. Exact matches use knowledge for the requested target; host and domain matches use broader fallback knowledge.
    - `matched_target` string, required: Target value that supplied the recommendation.
    - `proxy` union, required: Proxy recipe for the recommended browser.
      - ConfigRegistryDirectProxy: Direct egress recipe. Pass `{ "mode": "direct" }` as the browser's `proxy`.
        - `mode` 'direct', required
      - ConfigRegistryManagedProxy: Managed proxy recipe. `create` is a non-idempotent `POST /proxies` payload: create the resource once, retain its ID, and reuse that ID as the browser's `proxy.id`. Do not submit this recipe before every browser session.
        - `create` ProxyCreateRequest, required: Configuration for routing traffic through a proxy.
          - `bypass_hosts` string[]: Hostnames that should bypass the parent proxy and connect directly.
          - `config` union: Configuration specific to the selected proxy `type`.
            - object: Configuration for a deprecated datacenter proxy. Use an ISP proxy instead.
              - …
            - object: Configuration for an ISP proxy.
              - …
            - object: Configuration for residential proxies.
              - …
            - object: Configuration for mobile proxies.
              - …
            - object: Configuration for a custom proxy (e.g., private proxy server).
              - …
          - `name` string: Readable name of the proxy.
          - `protocol` 'http' | 'https': Protocol to use for the proxy connection.
          - `type` 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom', required: Proxy type to use. In terms of quality for avoiding bot-detection, from best to worst: `mobile` > `residential` > `isp`. `datacenter` is deprecated; use `isp` instead. Datacenter proxy creation remains supported for backward compatibility.
        - `mode` 'managed', required
    - `type` 'recommendation', required

## Other responses

- `400`: Bad Request – invalid input
- `401`: Unauthorized – missing or invalid authorization token
- `403`: Forbidden – insufficient permissions or plan
- `404`: Resource not found
- `500`: Internal Server Error

## Changes

- **2026-10-16** `03b369edee49`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/kernel/apis/kernel-api/changes/config-registry/lookup/post.md)

---

[API](https://skmtc.dev/kernel/apis/kernel-api.md) - [All operations](https://skmtc.dev/kernel/apis/kernel-api/llms.txt) - [OpenAPI document](https://skmtc.dev/kernel/apis/kernel-api/revisions/0f6cf4f58fe6?raw)