DEVELOPERS

Build website trust checks into your product.

Use HIP's public protocol, contracts, SDK, browser extension and plug-in interfaces. Connect to the managed HIP platform when your product needs hosted scores or certificates.

View on GitHub Contributing guide

Query a score

Read-only results, with the full finding list. Rate-limited and cacheable.

GET /api/v1/public/lookup/domain/example.com
{
  "domain": "example.com",
  "score": 94,
  "status": "verified",
  "scanned_at": "2026-07-30T09:12Z",
  "findings": [
    { "id": "mail.auth_partial",
      "severity": "medium", "weight": -6 }
  ]
}

Build a trust integration

Use versioned public contracts and plug-in interfaces without depending on HIP's private scoring implementation.

// Public, versioned result contract
{
  "domain": "example.com",
  "score": 94,
  "policyVersion": "hip-0301-v1",
  "status": "verified",
  "reasons": [ ... ]
}

Public building blocks

Use the Apache-2.0 protocol, contracts and SDKs in your own product. The hosted platform and private scoring service are separate.

Extension source

The browser extension is in the same repository. You can inspect exactly what it sends and when.

Data minimisation

HIP is designed to check content without storing private conversations or unnecessary personal data.

What HIP does not claim

HIP does not prevent every threat, and a high score does not guarantee safety. It means the checks HIP ran on that date found no significant problems. Scores provide evidence for your judgement.