Assets

Create an asset

Register a new monitored asset. Requires a write-scoped key. Enforces the plan asset quota and the per-tier minimum check interval; a hostname that fails the abuse filter is rejected (422). TD-2480: if this hostname was previously deleted, the existing (soft-deleted) asset is RESTORED with its full check history rather than a new one being created — the response is 200 with revived: true and the ORIGINAL asset id. A 409 therefore means an asset you can still see in GET /v1/assets already has this hostname and type.

post/v1/assets

Request

  • Base URL: https://api.merlonix.com
  • URL: https://api.merlonix.com/v1/assets
  • Auth: HTTP bearer

Request body

asset_type'domain' | 'hostname' | 'certificate' | 'dns_record' required
hostnamestring required

The hostname / domain to monitor.

attestation_idstring uuid

Optional ownership attestation; must belong to the tenant.

labelstring

Optional human label.

client_namestring
client_idstring uuid

Optional client bucket; defaults to Unassigned.

check_interval_secinteger

Check cadence. Clamped up to the plan minimum if faster than the tier allows.

ssl_enabledboolean
dns_enabledboolean
domain_enabledboolean

Opt into monitored domain-expiry (RDAP) checks.

dnsbl_enabledboolean

Opt into monitored DNS-blocklist (DNSBL) checks.

dns_security_enabledboolean

Opt into monitored DNSSEC + DANE/TLSA posture checks (informational).

security_headers_enabledboolean

Opt into the monitored HTTP security-header check (re-grades the six core headers on cadence + alerts when one disappears; informational).

email_auth_enabledboolean

Opt into the monitored email-auth (SPF/DMARC/MTA-STS/BIMI) posture check.

ct_watch_enabledboolean

Opt into Certificate-Transparency rogue/shadow-cert monitoring. Paid monitoring tiers only (team/agency/compliance).

agent_readiness_enabledboolean

Opt into monitored Agent-Readiness checks.

mcp_health_enabledboolean

Opt into monitored MCP-server health checks (discovers the MCP endpoint from /.well-known/mcp.json and runs a real JSON-RPC handshake + tools/list; alerts on downtime and tool/schema drift).

heartbeat_enabledboolean

Opt into the inbound heartbeat (dead-man's-switch) monitor. The ingest token is server-minted on first enable.

heartbeat_period_secinteger

Expected heartbeat interval in seconds.

heartbeat_grace_secinteger

Tolerance in seconds before a missed beat is declared dead.

port_enabledboolean

Opt into the outbound TCP-port monitor.

port_check_portinteger

TCP port to probe on the asset's hostname.

psi_enabledboolean

Opt into the PageSpeed Insights (Lighthouse) performance monitor. Paid monitoring tiers only (team/agency/compliance).

psi_check_urlstring uri

Optional override URL to measure with PageSpeed Insights (defaults to https://<hostname>).

health_enabledboolean

Opt into the application-health monitor (polls a JSON health endpoint). Paid monitoring tiers only (team/agency/compliance).

health_check_urlstring uri

JSON health endpoint to poll (laravel-health / Oh Dear shape, with a generic fallback). SSRF-guarded.

crawl_enabledboolean

Opt into the broken-links / mixed-content crawler. Paid monitoring tiers only (team/agency/compliance).

crawl_root_urlstring uri

Optional crawl root URL (defaults to https://<hostname>).

injection_scan_enabledboolean

Opt into the prompt-injection / hidden-text scan (computed-DOM render). Paid monitoring tiers only (team/agency/compliance).

uptime_check_urlstring uri

Enables HTTP uptime checks when set (GET probe). For method/headers/body/redirect assertions use uptime_check_config.

vendor_dependenciesstring[]

Response

A previously-deleted asset with this hostname was restored (TD-2480). The id is the ORIGINAL asset id and its check history is intact.

revivedtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.