Technologies

Find out what a website is built with: its CMS or e-commerce platform, JavaScript frameworks and libraries, analytics and tag managers, CDN, web server, programming language, payment providers, chat widgets and more — each with its version when the page gives it away.

Detection matches what the page shows against an open, community-maintained fingerprint database — over 7,000 technologies. The page is rendered in a real browser first, so what it loads with JavaScript is found too. It calls no model and costs 1 credit per call. See Credits.

curl -X POST https://urlpipe.dev/technologies \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com"}'

import requests

res = requests.post(
    "https://urlpipe.dev/technologies",
    headers={"Authorization": "Bearer YOUR_API_KEY"},
    json={"url": "https://example.com"},
)

const res = await fetch("https://urlpipe.dev/technologies", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ url: "https://example.com" }),
})

$ch = curl_init("https://urlpipe.dev/technologies");
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer YOUR_API_KEY",
        "Content-Type: application/json",
    ],
    CURLOPT_POSTFIELDS => json_encode(["url" => "https://example.com"]),
]);

$response = curl_exec($ch);

{
  "final_url": "https://example.com/",
  "technologies": [
    {
      "name": "WordPress",
      "slug": "wordpress",
      "version": "6.4.2",
      "confidence": 100,
      "categories": [
        { "slug": "cms", "name": "CMS" },
        { "slug": "blogs", "name": "Blogs" }
      ],
      "website": "https://wordpress.org",
      "description": "WordPress is a free and open-source content management system…",
      "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
      "detected_by": ["html", "meta", "script_src"],
      "implied_by": []
    },
    {
      "name": "PHP",
      "slug": "php",
      "version": "8.2.1",
      "confidence": 100,
      "categories": [{ "slug": "programming-languages", "name": "Programming languages" }],
      "website": "https://php.net",
      "description": "PHP is a general-purpose scripting language…",
      "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
      "detected_by": ["headers"],
      "implied_by": ["WordPress"]
    }
  ]
}

Response fields

What is read

Every signal the fingerprint database describes, read from the one visit to the page, plus the site's DNS records and its robots.txt. Nothing else on the site is requested.

• The rendered HTML: meta tags, script URLs, inline scripts and styles, the markup and the visible text.
• The response headers of the page itself, and the TLS certificate's issuer.
• Every cookie the visit was handed, third-party ones included.
• Every script the page loaded, including the ones a tag manager added after load — their URLs and their contents — the contents of its stylesheets, and the hosts it called with XHR or fetch.
• The page's JavaScript globals (e.g. jQuery.fn.jquery for the jQuery version) and its live DOM.
• The domain's DNS records — MX, NS, SOA and CNAME — which give away its mail provider, its DNS host and the CDN in front of it.
• The site's robots.txt.

Responses

Whatever the status, the response carries metadata headers: the result token, whether it was served from cache and how old that result is, how long we took, what it cost in credits, and the allowance you have left.