brin
api

API Overview

The brin REST API scores packages, web pages, repos, MCP servers, and skills with a single GET request. No auth, no signup, no SDK. Free.

the brin API scores any external context your agent might touch. no auth, no signup, no SDK.

##base URL

Text
https://api.brin.sh

##entity types

brin scores 9 origin types across 6 context categories:

OriginExample
npmnpm/express
pypipypi/requests
cratecrate/tokio
reporepo/expressjs/express
domaindomain/example.com
pagepage/example.com/path
mcpmcp/owner/repo
skillskill/owner/repo

##quick example

Bash
curl https://api.brin.sh/npm/express
JSON
{
  "score": 85,
  "verdict": "safe",
  "confidence": "high",
  "tolerance": "conservative",
  "url": "https://api.brin.sh/npm/express",
  "scanned_at": "2026-03-01T12:00:00Z"
}

every response also includes headers for lightweight checks:

Text
x-brin-score:      85
x-brin-verdict:    safe
x-brin-confidence: high
x-brin-tolerance:  conservative

##verdicts

VerdictMeaning
safeproceed
cautionreview before using
suspiciouslikely malicious
dangerousdo not use

##new artifacts

if an artifact hasn't been scanned yet, brin returns a preliminary score immediately and queues a full 3-tier scan in the background. subsequent requests return the full result. pass a webhook to get notified when the scan finishes:

Bash
curl "https://api.brin.sh/npm/some-package?webhook=https://your-server.com/callback"

##safety tolerance

tolerance controls how the numeric score (0–100) maps to a verdict. the raw score never changes.

ScoreConservative (default)LenientYolo
80–100safesafesafe
60–79cautionsafesafe
50–59cautioncautionsafe
40–49suspiciouscautionsafe
20–39suspicioussuspiciouscaution
0–19dangerousdangeroussuspicious
Bash
curl "https://api.brin.sh/npm/express?tolerance=lenient"

##authentication

none. the API is public and free.

##rate limits

300 requests per minute per IP. contact us for higher limits.

##availability

if brin is unreachable, your agent keeps working as normal — zero downtime risk. brin is designed to sit in the critical path without becoming a single point of failure. all integrations fail open by default.