Tech Detect

Domain in, technology stack out. Every hit carries a confidence value and the evidence it rests on. Paid inside the request over x402, no signup, no API key, no dashboard.

Endpoint

RoutePriceWhat it does
POST /stack 0.003 USDC Identify the technology stack of one website: CMS, shop, framework, JavaScript libraries with version, analytics, consent tool, payment provider, CDN, web server, host, font source, chat and booking widget.

How a call works

curl -s -X POST https://stack.netzhandwerker.de/stack \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

The first call answers with HTTP 402 and the accepted payment terms. An x402 capable client signs the terms and repeats the request; the answer arrives in the same round trip. Any x402 client library, or an MCP client pointed at /mcp, handles this without further setup.

What is reported

  • Content management system
  • Shop system
  • Web framework
  • JavaScript library
  • Analytics
  • Consent tool
  • Payment provider
  • CDN
  • Web server
  • Host
  • Font source
  • Chat tool
  • Booking tool

Rules we follow

  • robots.txt of the target origin is respected. A disallowed path is refused and never charged.
  • One request per host. No path probing, no admin path scanning.
  • Bot walls are not bypassed.
  • Results are cached for 24 hours per host.
  • Private and link local address ranges are refused.
  • Confidence never reads 100.

Signatures

174 signatures, written for this service. Wappalyzer closed its fingerprint database in August 2023 and every continuation of it carries GPL-3.0; BuiltWith and WhatRuns are proprietary. None of them is used here. The category list and the evidence kinds are published at /categories.

Discovery

Operational figures

Rolling 30 day window, updated live: 1 requests, 0 of them paid, 0 settlements, 0 USDC volume, 8 hosts in cache.