--- title: "Full Site Audit API – Page-Level SEO, Security, and Mobile Checks in One Call" url: https://apyhub.com/blog/full-site-audit-api author: Nikolas Dimitroulakis published: 2026-06-22T00:00:00Z tags: [engineering] --- # Full Site Audit API – Page-Level SEO, Security, and Mobile Checks in One Call # Full Site Audit API – Page-Level SEO, Security, and Mobile Checks in One Call ## Introduction Checking whether a web page is in good health usually means switching between tools: a meta-tag checker for SEO basics, a separate scanner for security headers, a mobile-friendliness test, and a manual click-through to catch broken links. Each tool has its own interface, its own report format, and its own definition of "good." Stitching those results into one picture takes time, and doing it for more than a handful of pages by hand doesn't scale at all. The [Full Site Audit API](https://apyhub.com/utility/chisleroff-full-site-audit-api) consolidates that page-level check into a single call: metadata, Open Graph and Twitter tags, security headers, basic performance, mobile-friendliness, and broken-link detection, returned as one structured result. ![Image placeholder — download and embed: "Coding, Web, Programming, Computer" photo](https://pixabay.com/photos/coding-web-programming-computer-3013601/) ## Common Challenges in Auditing a Web Page **Scattered tooling.** Most teams check SEO tags with one tool, security headers with another, and mobile-friendliness with a third — none of which talk to each other or return results in a comparable format. **ApyHub's API Solution:** one POST request returns metadata, security headers, performance basics, mobile-friendliness, and broken links together, in a single consistent JSON structure. **Inconsistent security-header visibility.** Headers like `Content-Security-Policy` or `Strict-Transport-Security` are easy to forget and hard to verify quickly without manually inspecting response headers in dev tools. **ApyHub's API Solution:** the response includes a structured `security_headers` object — presence checks for HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy, plus a simple letter grade (e.g. `"score": "C"`) summarizing the result. **Manually verifying social/SEO metadata.** Confirming that a page has the right title, description, canonical tag, and Open Graph/Twitter card data usually means opening the page source and reading through it by hand. **ApyHub's API Solution:** the `meta_tags` object returns title, description, canonical URL, Open Graph fields, and Twitter card type directly, so the check is a field lookup instead of a manual read-through. **No quick signal on page weight or request count.** Knowing roughly how heavy a page is — its size and how many requests it triggers — usually requires a separate performance-testing tool. **ApyHub's API Solution:** the `performance` object returns page size (in bytes and a human-readable form), load time in milliseconds, and request count in the same response. **Hand-checking for broken links.** Manually clicking through a page's links to confirm none are dead doesn't scale past a handful of pages. **ApyHub's API Solution:** the `broken_links` field returns any detected dead links directly in the audit result. ## About ApyHub's Full Site Audit API ![Screenshot placeholder: Full Site Audit API page and Playground](PLACEHOLDER — insert screenshot of https://apyhub.com/utility/chisleroff-full-site-audit-api) The Full Site Audit API runs a page-level analysis against a single URL and returns the result as structured JSON — it's built for quick diagnostic snapshots, not as a full-site crawler or deep multi-page audit system. **Endpoint:** `POST https://api.apyhub.com/chisleroff/intel/audit` **Request:** ```bash curl --location --request POST 'https://api.apyhub.com/chisleroff/intel/audit' \ --header 'apy-token: {{token}}' \ --header 'Content-Type: application/json' \ --data-raw '{ "url": "https://example.com" }' ``` The request body takes one required field: `url` (string, http/https only). **Response (example):** ```json { "url": "https://example.com", "meta_tags": { "title": "Example Domain", "description": "An example website for documentation purposes", "canonical": "https://example.com", "og_title": "Example Domain", "og_description": "An example website", "og_image": "https://example.com/og.jpg", "twitter_card": "summary" }, "tech_stack": ["Nginx", "Google Analytics"], "security_headers": { "has_hsts": true, "has_csp": false, "has_x_frame_options": true, "has_x_content_type": true, "has_referrer_policy": false, "score": "C", "details": { "strict-transport-security": "Present", "content-security-policy": "Missing", "x-frame-options": "Present", "x-content-type-options": "Present", "referrer-policy": "Missing" } }, "performance": { "page_size_bytes": 45000, "page_size_readable": "43.9 KB", "load_time_ms": 320, "num_requests": 15 }, "broken_links": [], "is_mobile_friendly": true, "source_url": "https://example.com" } ``` A successful call returns `200`. A `400` indicates an invalid domain or parameter, `401` means missing or invalid authentication, and `500` covers unexpected server-side errors. Authentication uses the `apy-token` header (or basic auth via the `Authorization` header), with credentials generated from API Keys in your [ApyHub](https://apyhub.com/) workspace settings. Pricing is 100 atoms per call. You can test it directly in the [API Playground](https://apyhub.com/utility/chisleroff-full-site-audit-api) before integrating. ## Use Cases - **SEO agencies and freelancers:** quick client-page health checks without juggling four separate tools per audit. - **Dev teams shipping new pages:** a pre-launch check for missing security headers or incomplete Open Graph tags. - **Directory and aggregator sites:** running a lightweight audit against listed URLs to flag pages that need attention. - **Internal tooling:** building a dashboard that tracks metadata and security-header health across a set of marketing pages over time. ## Conclusion A page-level audit doesn't need to mean four open tabs and a spreadsheet to compare results. The Full Site Audit API returns metadata, security headers, performance basics, mobile-friendliness, and broken-link detection from a single call, structured the same way every time — useful exactly where a quick, consistent diagnostic snapshot matters more than a full-site crawl. [**Try the Full Site Audit API →**](https://apyhub.com/utility/chisleroff-full-site-audit-api) ## FAQ **What does the Full Site Audit API actually check?** It checks page metadata (title, description, canonical URL, Open Graph and Twitter tags), security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), basic performance (page size, load time, request count), mobile-friendliness, and broken links — all from one call against a single URL. **Is this a full-site crawler?** No. It's built for quick, page-level diagnostic snapshots, not deep multi-page crawling or in-depth audit reporting. **What does the security header score mean?** The response includes a simple letter grade (e.g. "C") summarizing how many of the checked security headers are present, alongside a detailed breakdown showing exactly which headers were found and which were missing. **Does it work on any URL?** It works on public, accessible web pages reachable over HTTP or HTTPS. Pages behind authentication or otherwise not publicly accessible won't return meaningful results. **What do I need to send in the request?** Just the URL you want audited, as a POST request with a JSON body containing a single `url` field. **How is the API authenticated?** Requests need either an `apy-token` header or basic authentication via the `Authorization` header, using credentials generated from your ApyHub workspace's API Keys settings. **What happens if I send an invalid URL?** The API returns a `400` status code for an invalid domain or parameter, with an error object describing the issue (for example, an "Invalid URL" message). **How much does each call cost?** 100 atoms per call. **Can I test it before integrating?** Yes — the API Playground on the API's page lets you run a real audit against a URL directly in the browser before writing any integration code. **Does it detect every broken link on a page?** It returns basic broken-link detection as part of the audit result; for pages with a large number of links or deeper link-validation needs, a dedicated link-checking tool may be a better fit alongside this API. **Why would I use this instead of running Lighthouse or a similar tool manually?** Manual tools work fine for a single page checked occasionally, but they don't return results as structured data you can store, compare, or feed into your own dashboard. This API returns the same checks as consistent JSON, which is easier to automate across many pages. **Is mobile-friendliness a pass/fail check or more detailed than that?** The response returns a straightforward `is_mobile_friendly` boolean as part of the overall audit result. ## About the Provider: Website Intelligence The Full Site Audit API is part of **Website Intelligence**, a web analysis and content utility API suite built to extract, validate, and transform data from public web pages. Alongside the Full Site Audit API, the suite includes: - **Data Extraction** — structured information pulled from articles, products, recipes, and contact pages, with fallback handling for partially structured content. - **HTML to Markdown Conversion** — clean, readable Markdown generated from web pages by focusing on main content and reducing boilerplate. - **SEO & Structured Data Validation** — analysis of structured data, Open Graph, and Twitter tags, with actionable issues and fix suggestions. - **PDF Conversion** — public URLs or raw HTML converted into well-formatted PDFs with reliable rendering controls. - **OG Image Generation** — production-ready Open Graph images generated from customizable templates and metadata. Website Intelligence is built for public, accessible web pages and positions itself as a fast, modular toolkit for page-level insights and transformations — rather than a full-site crawler or deep analysis system. [**See more APIs from Website Intelligence →**](https://apyhub.com/services/provider/chisleroff)