Phish

5 live operations under /api/phish. 3 require a machine key; 2 are public. Tagged: Other.

Method	Path	What it does	Auth
GET	/api/phish/check	public lookup	public
POST	/api/phish/classify	body { url } → { score, reasons }	key
GET	/api/phish/feed	public top-N by confidence in last 24h	public
POST	/api/phish/report	→ upsert into phish_fingerprints OR mal_fingerprints (when kind present), + audit row + 'av.phish.detected' fanout.	key
POST	/api/phish/verify	body { fingerprint_hash } — increment count	key

Generated by scripts/generate-reference.mjs from https://zeq.me/openapi.json.