Security & Validation APIs
Credit card validation, IBAN checks, VAT verification, AES encryption/decryption, and OTP generation APIs.
9 endpoints available. All free to try without an API key.
/v1/validate/credit-card Validate a credit card number using the Luhn algorithm and detect the card brand.
Validate any card number with the Luhn algorithm and detect the brand (Visa, Mastercard, Amex, Discover). Returns validity and brand in JSON. Free API.
/v1/validate/iban Validate an IBAN and extract its country code, bank code, and check digits.
Validate any IBAN and extract country code, bank code, and check digits. Supports 80+ countries. Returns validity and parsed components in JSON. Free API.
/v1/validate/vat Validate a European VAT identification number.
Validate European VAT identification numbers and extract the country code and expected format. Free API for B2B invoicing and tax compliance.
/v1/encrypt/encrypt Encrypt text with AES-256-GCM using a password.
Encrypt text with AES-256-GCM using a password. Server-side encryption with no data storage. Free API for developers.
/v1/encrypt/decrypt Decrypt AES-256-GCM ciphertext using a password.
Decrypt AES-256-GCM ciphertext using a password. Server-side decryption with no data storage. Free API for developers.
/v1/otp/generate Generate a numeric one-time password with configurable length.
Generate numeric or alphanumeric one-time passwords (4-10 digits) via API. Use for 2FA, email verification, and temporary access. Configurable length. Free.
/v1/breach/check Check if a password has appeared in known data breaches.
Check if a password has appeared in known data breaches for free. Uses k-Anonymity so the full password is never sent over the network. Returns breach count and recommendation.
/v1/security/grade Grade a URL's security headers on a scale from A+ to F.
Grade any website's security headers from A+ to F. Checks HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and Permissions-Policy.
/v1/phishing/check Check a URL against known phishing and malware databases.
Check any URL against known phishing and malware databases. Returns threat type, source, and malicious status. Free API powered by URLhaus for real-time URL threat intelligence.
Start building with Botoi APIs
Free tier, no credit card required. Get your API key and start making requests in seconds.