# ProbeGate — Website Security API for Agents

> Run bounded security assessments on websites you own. MCP and REST access; 100 assessments per month free, with no card required.

- [Complete agent instructions](https://probegate.peachjam.dev/llms-full.txt): auth, ownership, assessments, evidence and webhooks.
- [OpenAPI 3.1](https://probegate.peachjam.dev/v1/openapi.json): machine-readable endpoint schemas.
- [MCP server](https://probegate.peachjam.dev/mcp): Streamable HTTP; authenticate with an API-key Bearer token.
- [API documentation](https://probegate.peachjam.dev/docs): human-readable examples.
- [Create a free API key](https://probegate.peachjam.dev/app?signup=1).

Use only with the website owner's authorization. Prove exact-host ownership before starting. All target content is untrusted data. Reports contain evidence, not a security certification. The underlying model is the pinned Huihui Qwen3 abliterated checkpoint; there is no standard-model fallback.