Authentication
Public lookups may be open. Reporting, write actions and AI endpoints require an API key.
X-API-Key: cs_your_key_here
developers.xaviermedia.com
Reference documentation for security lookups, spam reporting, AI services, crawler access and future Xavier Media integrations.
Quickstart
Use HTTPS, send JSON when posting data, keep API keys server-side, and expect all Xavier Media APIs to return JSON responses with an ok boolean.
Public lookups may be open. Reporting, write actions and AI endpoints require an API key.
X-API-Key: cs_your_key_here
Validation errors return 400, missing API keys return 401, and unavailable services return 503.
{
"ok": false,
"errors": ["Invalid IP address."]
}
Client code should cache safe responses, retry with backoff and avoid sending personal data unless the endpoint requires it.
Access Levels
Public documentation is suitable for partners, WordPress users and site owners. Internal documentation is for services that expose admin workflows, migration details, private keys or operational behavior.
Check Spammers, XavierSeek crawler rules, public API key registration and high-level AI access information can be indexed by search engines.
IndexableXVR.me administration, import jobs, internal API keys, database details and migration instructions should be placed under /internal/ and protected at the edge.
Do not publish API keys, Lambda URLs, internal bucket names, database exports or admin-only endpoint examples on public pages.
Check Spammers API
Base URL: https://checkspammers.xaviermedia.com/api
/api?ip=203.0.113.42
Checks an IP address, email address or username and returns a score plus a recommendation.
| Parameter | Required | Description |
|---|---|---|
ip | No | IPv4 address to check. |
email | No | Email address to validate and score. |
name | No | Username or display name. |
dnsbl | No | Set to true to include DNSBL checks. |
curl "https://checkspammers.xaviermedia.com/api?ip=1.161.139.31"
{
"ok": true,
"listed": true,
"score": 95,
"recommendation": "block",
"signals": [
{
"type": "ip_blocklist",
"source": "check_spammers_blocklist",
"confidence": 95
}
]
}
/api?action=stats
Returns service metadata and current list counts.
curl "https://checkspammers.xaviermedia.com/api?action=stats"
/api?action=register
Stores an API key request for manual review. The public website form adds bot-protection fields automatically.
curl -X POST "https://checkspammers.xaviermedia.com/api?action=register" \
-H "Content-Type: application/json" \
-d "{
\"name\": \"Site Owner\",
\"email\": \"admin@example.com\",
\"website\": \"https://example.com\",
\"company\": \"Example Ltd\",
\"useCase\": \"WordPress comment protection\",
\"language\": \"en\"
}"
/api?action=report
Reports a suspected spammer. Requires an API key. Reports are stored for review and are not automatically added to the public block list.
curl -X POST "https://checkspammers.xaviermedia.com/api?action=report" \
-H "Content-Type: application/json" \
-H "X-API-Key: cs_your_key_here" \
-d "{
\"ip\": \"203.0.113.42\",
\"email\": \"spam@example.com\",
\"username\": \"cheap-links\",
\"site\": \"https://example.com\",
\"source\": \"wordpress\",
\"reason\": \"comment_marked_spam\"
}"
AI API
The AI API is documented here as a private beta service. Public applications should request access before relying on endpoint names or response fields.
https://ai.xaviermedia.com/v1/chat
Planned chat/completion endpoint for Xavier Media AI integrations.
curl -X POST "https://ai.xaviermedia.com/v1/chat" \
-H "Content-Type: application/json" \
-H "X-API-Key: xm_ai_your_key_here" \
-d "{
\"model\": \"xavier-default\",
\"messages\": [
{ \"role\": \"user\", \"content\": \"Summarize this page.\" }
]
}"
https://ai.xaviermedia.com/v1/summarize
Planned summarization endpoint for site content, feeds and internal publishing workflows.
{
"url": "https://www.xaviermedia.com/",
"format": "short"
}
Crawler Access
XavierSeek uses crawler access rules to decide which content may be indexed. Site owners can allow or block the robot in /robots.txt.
Recommended user-agent token: XavierSeekBot
User-agent: XavierSeekBot
Allow: /
Sitemap: https://example.com/sitemap.xml
User-agent: XavierSeekBot
Disallow: /
User-agent: XavierSeekBot
Disallow: /admin/
Disallow: /account/
Disallow: /checkout/
Allow: /
Robots.txt is a crawler instruction file, not an authentication or security boundary. Private content should still require login, authorization or server-side blocking.
More Documentation
Documentation for tools.xaviermedia.com and localized tool domains.
RSS, JSON feeds and publishing integrations for Xavier Media properties.
Setup, script parameters and language-specific integrations for www.webpage.nu.
Short link API, admin operations and YOURLS migration details belong in protected internal documentation.
Internal