{
 "meta": {
  "publisher": "BotOrNot",
  "site": "https://getbotornot.com/",
  "docs": "https://getbotornot.com/api/",
  "openapi": "https://getbotornot.com/openapi.json",
  "generated_at": "2026-10-16T00:57:12.750Z",
  "disclosure": "Not investment advice. BotOrNot earns affiliate commissions from some outbound links (currently Hyperliquid referral links, https://app.hyperliquid.xyz/join/AMPLIFY, labeled on the site); payouts never change a listing, ranking or warning. Full disclosure: https://getbotornot.com/about/#disclosure",
  "cors": "*",
  "auth": "none",
  "rate_limit": "Be reasonable; data changes at most daily. Cache responses.",
  "license_note": "Facts are sourced from the public records linked in each entry. Please credit BotOrNot and link the entry page when you reuse the data."
 },
 "endpoints": [
  {
   "endpoint": "GET /api/index.json",
   "description": "This list of endpoints."
  },
  {
   "endpoint": "GET /api/bots.json",
   "description": "All 102 documented bots with pricing, exchanges, custody model, red flags (each with a source URL) and record_status."
  },
  {
   "endpoint": "GET /api/bots/{slug}.json",
   "description": "One bot, plus California DFPI scam reports that impersonate its brand (impostor_entries)."
  },
  {
   "endpoint": "GET /api/prediction-markets.json",
   "description": "Prediction-market venues (Kalshi, Polymarket US, Gemini Predictions) with CFTC status and sources, plus the bots in the “Prediction market bots” category."
  },
  {
   "endpoint": "GET /api/scams.json",
   "description": "10 SEC/CFTC enforcement actions involving trading bots or \"AI\" trading, plus 600 California DFPI Crypto Scam Tracker entries. Every entry has an official source URL."
  },
  {
   "endpoint": "GET /api/leaderboard.json",
   "description": "74 Hyperliquid vaults ranked by 30-day PnL from Hyperliquid's public data."
  },
  {
   "endpoint": "GET /api/check.json?q={name or website}",
   "description": "Look a name or domain up against the bot directory and every scam record. Returns verdict: watchlist_match, documented_bot, both, or no_record (no_record is NOT a clean bill of health)."
  },
  {
   "endpoint": "GET /api/site-check.json?url={website}",
   "description": "Signals for a pasted website: exact matches in the CA DFPI scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, and HTTPS. Signals, not a verdict."
  },
  {
   "endpoint": "POST /api/site-check",
   "description": "Same as above with JSON {\"url\": \"...\", \"text\": \"optional pasted text\"}; text is scanned for regulator-listed red-flag phrases and never stored."
  },
  {
   "endpoint": "GET /api/methodology.json",
   "description": "Report card rules (versioned), levels and custody models."
  },
  {
   "endpoint": "GET /api/changes.json",
   "description": "Change events: new regulator cases, new DFPI entries, shutdowns, report-card changes, regulator releases. Also as Atom: /feed.xml and /bots/{slug}/feed.xml."
  },
  {
   "endpoint": "GET /api/proven-returns.json",
   "description": "Hyperliquid vaults that self-describe as bots/algos, with on-chain PnL, plus directory bots with a verifiable vault mapping."
  },
  {
   "endpoint": "POST /mcp",
   "description": "Read-only Model Context Protocol server (JSON-RPC over Streamable HTTP, stateless). Tools: check_bot, get_bot, get_report_card, list_bots, search_scams, check_website, get_changes, get_leaderboard, compare_bots."
  }
 ]
}