Enrich

GET /v1/enrich/{domain}

The core endpoint. Pass any company domain and get back every tool they use, detected from public records.

Example

$curl https://api.casestudies.dev/v1/enrich/bestseller.com \
> -H "X-API-Key: YOUR_KEY"

Response

1{
2 "domain": "bestseller.com",
3 "tools_detected": 16,
4 "tools": [
5 { "tool": "Salesforce", "category": "CRM" },
6 { "tool": "Okta", "category": "Identity" },
7 { "tool": "AWS", "category": "Cloud" },
8 { "tool": "Datadog", "category": "Monitoring" },
9 { "tool": "Microsoft 365", "category": "Collaboration" },
10 { "tool": "Atlassian", "category": "Collaboration" }
11 ],
12 "by_category": {
13 "CRM": ["Salesforce"],
14 "Identity": ["Okta", "Duo Security"],
15 "Cloud": ["AWS", "Azure"],
16 "Collaboration": ["Microsoft 365", "Atlassian"],
17 "Monitoring": ["Datadog", "Grafana Cloud"]
18 }
19}

Fields

FieldDescription
tools_detectedTotal number of tools identified
toolsFlat list of tools with category labels
by_categorySame tools grouped by category

Detection sources

SourceWhat it finds
MX recordsEmail provider (Google Workspace, Microsoft 365, etc.)
TXT recordsDomain verification tokens for 100+ tools
SPF includesEmail senders (Mailchimp, SendGrid, HubSpot, etc.)
NS recordsDNS provider (AWS Route 53, Cloudflare, etc.)
DMARCEmail authentication and security posture
HTTP headersCDN, WAF, hosting provider
robots.txtMonitoring and analytics tools
Certificate Transparency logsInternal subdomains revealing backend tooling

Streaming variant

For real-time progressive results (results stream in phase by phase as they are detected):

$curl https://api.casestudies.dev/v1/enrich-stream/bestseller.com \
> -H "X-API-Key: YOUR_KEY" \
> -H "Accept: text/event-stream"

Returns Server-Sent Events. Each event includes the tools detected so far plus a done: true event when complete.