# Seeking Data Labs, Sightline reporting API + consultancy

> Seeking Data Labs runs Sightline: AI, evidence-backed website and security
> reports (UI/UX, SEO, tech, and OWASP ASVS security posture), delivered as a
> hosted report page plus a machine-readable reporting API. Reports are paid per
> run from a prepaid USDC credit balance. Everything is agent-native and
> provenance-carrying: every response is an envelope {data, meta, provenance}
> so a caller can audit the evidence and lineage behind a finding.

## Getting started
- Sign up (free): https://seekingdatalabs.com/app/signup
- Issue an API key: POST https://api.seekingdatalabs.com/v1/keys (session-authed)
- Machine contract (all endpoints, schemas): https://api.seekingdatalabs.com/openapi.json

## Sightline reporting API (self-serve, session or API key)
Run a report, poll until ready, then fetch it. A run requires a verified domain
and available credit; charged per run from your balance.
- Start a report: POST https://api.seekingdatalabs.com/v1/analysis/run?domain=DOMAIN&report_type=analyzer|asvs
- List your reports: GET https://api.seekingdatalabs.com/v1/analysis/reports?archived=
  The current report per domain. archived=1 adds the ones a newer report
  superseded, each carrying archived_at. A superseded report is still fetchable
  by id and by share link, forever; only the listing leaves it out.
- Fetch one report: GET https://api.seekingdatalabs.com/v1/analysis/report/{id}
- Report findings: GET https://api.seekingdatalabs.com/v1/analysis/report/{id}/findings
- Report PDF: GET https://api.seekingdatalabs.com/v1/analysis/report/{id}/pdf
- Create a share link: GET https://api.seekingdatalabs.com/v1/analysis/report/{id}/share
- Read a shared report (no auth): GET https://api.seekingdatalabs.com/v1/analysis/shared/{token}

## Credit balance and transactions
- Balance + paginated ledger: GET https://api.seekingdatalabs.com/v1/credits?limit=&before=
  Cursor-paginated, newest first: pass the previous response's next_before as
  before for the next page. balance_atomic is the running total over the whole
  ledger; the topup block carries the exact top-<account-id> memo that adds
  credit (USDC on Solana).

## Pentest and consultancy (NOT self-serve)
There is no API that runs a penetration test. A pentest is requested, reviewed
by a human, and dispatched only after an offline authorization and contract.
- Request a pentest / discussion / consultancy: POST https://api.seekingdatalabs.com/v1/requests
  body {"kind":"pentest"|"pentest_discussion"|"consultancy","domain":"...","detail":"..."}
  This records intent for operator review; it does not trigger or schedule any scan.