Developer Hub & Intelligence APIs
Build automated compliance and corporate intelligence into your software.
Query 16+ live government company registries, screen against 140+ global sanctions lists, unwrap multi-tier beneficial ownership graphs, and run digital OSINT forensics via 23 REST endpoints or native Model Context Protocol (MCP) tools.
23
Live API Endpoints
16+
Live Registries Queried
< 4s
Average Response Latency
100%
Deterministic JSON Output
Three ways to integrate Diliguard intelligence.
Whether you are building backend microservices, configuring AI agent workflows, or equipping IDEs with investigative superpowers, Diliguard provides native developer tooling.
1. REST API (v2)
Direct HTTP access for your backend applications. Standard API key authentication, per-organization rate limits, credit-based billing, and typed JSON responses across 23 endpoints.
2. Model Context Protocol (MCP)
Equip Claude Desktop, Cursor, and Windsurf with Diliguard investigative tools. Your local assistant calls live registry checks and AML screening without human middleware.
3. AI Agent Skills
Pre-packaged tool specifications for autonomous coding agents and multi-agent pipelines. Embed vendor risk checks and sanctions screening directly into your CI/CD routines.
Quickstart code examples.
Execute your first compliance scan in under 60 seconds. Replace the token placeholder with your key from the portal.
cURL Request
curl -X POST https://api.diliguard.com/api/v2/scan-sanctions -H "Content-Type: application/json" -H "X-API-Key: dg_live_abc123def456" -d '{"target_name": "Acme Holdings Ltd"}'Python (Requests)
import requests
headers = {
"Content-Type": "application/json",
"X-API-Key": "dg_live_abc123def456"
}
payload = {
"company_name": "Deutsche Bank AG"
}
response = requests.post(
"https://api.diliguard.com/api/v2/scan-ubo",
json=payload,
headers=headers
)
data = response.json()
print("Status:", data.get("data", {}).get("status"))
print("Beneficial Owners:", data.get("data", {}).get("companies", []))Node.js (Fetch)
const response = await fetch("https://api.diliguard.com/api/v2/scan-corporate-intel", {
method: "POST",
headers: {
"Content-Type": "application/json",
"X-API-Key": "dg_live_abc123def456"
},
body: JSON.stringify({ company_name: "Siemens AG" })
});
const result = await response.json();
console.log("LEI Number:", result.data.lei);
console.log("Active Status:", result.data.status);Claude Desktop MCP Configuration
{
"mcpServers": {
"diliguard": {
"command": "npx",
"args": ["-y", "@sluxia/diliguard-mcp"],
"env": {
"DILIGUARD_API_URL": "https://api.diliguard.com",
"DILIGUARD_API_KEY": "dg_live_abc123def456"
}
}
}
}Complete intelligence endpoint catalogue.
All endpoints use deterministic POST parameters and return standardized JSON envelopes with credit balances and unique request IDs.
Corporate & Registry Verification
POST /api/v2/scan-ubo (1 Credit)
Unwrap ultimate beneficial ownership across 16 global jurisdictions.
POST /api/v2/scan-corporate-intel (1 Credit)
Fetch official GLEIF LEI identifiers, registration numbers, and status.
POST /api/v2/scan-offshore (1 Credit)
Screen entity and director names against offshore leaks databases.
POST /api/v2/scan-regulatory (1 Credit)
Search enforcement records, fines, and disciplinary actions from global regulators.
AML, PEP & Sanctions Screening
POST /api/v2/scan-sanctions (1 Credit)
Match entity or individual against OFAC, UN, EU, and UK HMT watchlists.
POST /api/v2/scan-pep (1 Credit)
Check Politically Exposed Persons status across global public record datasets.
POST /api/v2/scan-media (1 Credit)
Scan global news and legal databases for adverse media and reputational risk.
POST /api/v2/registry-entity-research (5 Credits)
Multi-source automated entity background verification report.
Financial & Crypto Forensics
POST /api/v2/scan-crypto (1 Credit)
Analyze public wallet addresses across 10+ major blockchain networks.
POST /api/v2/scan-crypto-illicit (1 Credit)
Detect exposure to mixers, darknet markets, and sanctioned crypto clusters.
POST /api/v2/scan-iban (1 Credit)
Validate international bank account structure and routing legitimacy.
POST /api/v2/scan-vat (1 Credit)
Verify European VAT numbers against the live VIES registry.
Digital OSINT & Workflows
POST /api/v2/scan-domain (1 Credit)
WHOIS, DNS records, MX records, and domain reputation scoring.
POST /api/v2/scan-ip (1 Credit)
Geolocate IP addresses and detect proxies, VPNs, Tor exit nodes, and data centers.
POST /api/v2/workflow-corporate (5 Credits)
Run combined corporate KYB, sanctions, adverse media, and UBO sweep.
POST /api/v2/workflow-ultimate-fraud (15 Credits)
Deep composite investigation across corporate, person, and digital footprints.
Engineering infrastructure built for production reliability.
We designed the Diliguard developer infrastructure to handle high-concurrency production workloads without downtime or data ambiguity.
Deterministic JSON Schemas
Every response returns a structured object with clear risk flags, confidence ratings, and typed data fields. Zero guesswork or unpredictable response formatting.
Zero Model Training Policy
Your search queries and client identities are confidential. Diliguard never logs or uses customer investigation parameters to train machine learning models.
Explicit Rate Limit Headers
Track request allowances in real time with standard X-RateLimit-Limit and X-RateLimit-Remaining HTTP headers included in every API response.
Audit-Ready Request Logging
Every call receives a unique request ID. Inspect past scans, payload timestamps, and verification outcomes via the GET /api/v2/account/history endpoint.
Three simple steps to production deployment.
Step 1: Create Organization & Key
Register your firm on portal.diliguard.com, choose your credit tier, and generate your live API token in under 30 seconds.
Step 2: Test via Sandbox or MCP
Validate your payload schema with cURL or run test queries in the Model Context Protocol Inspector before writing production logic.
Step 3: Ship Automated Verification
Embed automated checks into user onboarding forms, payment routing gates, or background sweep cron jobs.
Frequently asked developer questions.
How are rate limits calculated and enforced?
Rate limits are calculated on a rolling 60-second window per organization based on your subscription tier. If your application exceeds its requests-per-minute threshold, the API returns a 429 status code with a RATE_LIMIT_EXCEEDED error code.
What happens if an external government registry experiences downtime?
When a specific national registry is temporarily unreachable, Diliguard automatically falls back to secondary sources such as global LEI and cached registry records, returning an explicit source status so your application knows exact verification provenance.
How does the MCP server keep API credentials secure?
The @sluxia/diliguard-mcp package runs locally on your machine via npx. Your DILIGUARD_API_KEY remains in your local environment variables and is transmitted directly to api.diliguard.com without passing through any intermediate proxy servers.
Do health checks and account balance endpoints consume credits?
No. Account management endpoints such as GET /api/v2/account/usage and GET /api/v2/account/keys cost 0 credits. Credits are deducted only when executing live intelligence scans or composite workflows.
Start building with Diliguard intelligence in under 5 minutes.
Create your developer account, generate an API token, and execute your first corporate due diligence query today.