{
  "openapi": "3.0.0",
  "info": {
    "title": "CookieScope API",
    "description": "GDPR, ePrivacy, and CCPA Compliance Engine. Audits zero-consent tracking cookies, external font IP leaks, and generates drop-in consent shield code.",
    "version": "1.0.0",
    "contact": {
      "name": "ScopeKit Privacy Team",
      "url": "https://cookiescope.agentlabs.workers.dev"
    }
  },
  "servers": [
    {
      "url": "https://cookiescope.agentlabs.workers.dev",
      "description": "Production Edge"
    },
    {
      "url": "http://localhost:3003",
      "description": "Local Dev"
    }
  ],
  "components": {
    "securitySchemes": {
      "ApiKeyAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "X-API-Key",
        "description": "Enter Pro/Agency API Key. Use 'cookiescope_eval_2026' for evaluation."
      }
    }
  },
  "paths": {
    "/health": {
      "get": {
        "summary": "Health Check",
        "tags": [
          "Tier 1: Free Diagnostic Suite"
        ],
        "responses": {
          "200": {
            "description": "Service online"
          }
        }
      }
    },
    "/v1/audit": {
      "get": {
        "summary": "Full Privacy & Consent Audit",
        "tags": [
          "Tier 1: Free Diagnostic Suite"
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "stripe.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Privacy audit findings"
          }
        }
      }
    },
    "/v1/audit/cookies": {
      "get": {
        "summary": "Zero-Consent Cookie Audit",
        "tags": [
          "Tier 1: Free Diagnostic Suite"
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "shopify.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Cookie breakdown"
          }
        }
      }
    },
    "/v1/audit/fonts": {
      "get": {
        "summary": "Google Font IP Leak Audit",
        "tags": [
          "Tier 1: Free Diagnostic Suite"
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "github.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Font IP leaks"
          }
        }
      }
    },
    "/v1/audit/sri": {
      "get": {
        "summary": "Subresource Integrity (SRI) Check",
        "tags": [
          "Tier 1: Free Diagnostic Suite"
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "stripe.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "SRI status"
          }
        }
      }
    },
    "/v1/generate/consent-shield": {
      "get": {
        "summary": "Drop-In Zero-Dependency Consent Shield Script",
        "tags": [
          "Tier 2: Pro Remediation Utilities"
        ],
        "security": [
          {
            "ApiKeyAuth": []
          }
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "stripe.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Consent shield code"
          },
          "401": {
            "description": "API Key Required"
          }
        }
      }
    },
    "/v1/generate/font-shield": {
      "get": {
        "summary": "Self-Hosted Font @font-face Generator",
        "tags": [
          "Tier 2: Pro Remediation Utilities"
        ],
        "security": [
          {
            "ApiKeyAuth": []
          }
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "stripe.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "CSS rules"
          },
          "401": {
            "description": "API Key Required"
          }
        }
      }
    },
    "/v1/agency/legal-report": {
      "get": {
        "summary": "White-Label Printable Compliance Certificate (HTML)",
        "tags": [
          "Tier 3: Agency & Legal Suite"
        ],
        "security": [
          {
            "ApiKeyAuth": []
          }
        ],
        "parameters": [
          {
            "name": "domain",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "example": "stripe.com"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "HTML Certificate"
          },
          "401": {
            "description": "API Key Required"
          }
        }
      }
    }
  }
}