Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Kiprio API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fkiprio.com%2Fkiprio" | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fkiprio.com%2Fkiprio" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with Kiprio API.
Look up a domain's WHOIS record, DNS records by type such as A, MX, and TXT, and its SSL certificate on a chosen port
Validate an email address before adding it to a list
Redact PII such as phone and email from text, optionally returning detected entity positions
Check grammar and spelling for a text in a chosen BCP 47 language such as en-GB
Capture a website screenshot at a set width, optionally of the full page
GET STARTED
Generate QR codes as PNG or SVG and barcodes in a chosen format and size
Hash a string with md5, sha256, sha512, sha3-256, and other listed algorithms
Patterns agents use Kiprio API for, with concrete tasks.
★ AI agent domain checks through Jentic
An operations agent asked whether a domain is healthy searches Jentic for 'check an SSL certificate', loads the Kiprio SSL, DNS, and WHOIS operations with their input schemas, and runs them in turn for the domain. Your own Jentic One instance injects the X-API-Key header at call time, so the agent never holds the key.
Call GET /ssl with domain 'example.com', GET /dns-lookup with types 'A,MX,TXT', and GET /whois for the same domain, then summarise certificate expiry and mail records
PII redaction before storage
A support tool strips personal data from transcripts before they are stored or shared. POST /redact takes the text, an optional comma-separated list of PII types such as phone and email, and an entities flag that returns the positions of each detected item.
Call POST /redact with text 'Call John on 07911 123456 or email john@example.com', redact 'phone,email', and entities true, then store the redacted text
Signup list hygiene
A signup flow validates each email address with GET /email-validate and checks where a signup came from with GET /ip before accepting it, so obviously invalid addresses are caught at entry.
Call GET /email-validate for each new signup email and GET /ip with the signup IP, then flag records that fail validation
Marketing assets on demand
A marketing agent prepares print and web assets: a QR code for a campaign URL in PNG or SVG with chosen colours and error-correction level, a barcode for a product label, and a screenshot of the landing page for a review deck.
Call GET /qr with url 'https://example.com/spring', size 1024, and format 'svg', then GET /screenshot of the same URL with full_page true
12 endpoints — the kiprio api bundles small utility lookups and converters behind one key: whois, dns records, and ssl certificate inspection for a domain, email address validation, ip geolocation, and robots.
METHOD
PATH
DESCRIPTION
/whois
WHOIS lookup
/dns-lookup
DNS records lookup
/ssl
SSL certificate inspection
/email-validate
Email address validation
/redact
PII redaction
/grammar
Grammar and spell check
/screenshot
Website screenshot
/qr
QR code generator
/whois
WHOIS lookup
/dns-lookup
DNS records lookup
/ssl
SSL certificate inspection
/email-validate
Email address validation
/redact
PII redaction
/grammar
Grammar and spell check
/screenshot
Website screenshot
/qr
QR code generator
What agents get from Jentic-routed access to this vendor.
Setup
Wiring Kiprio by hand means sending the X-API-Key header on keyed calls, knowing which operations are open, and handling image responses from the QR, barcode, and screenshot operations. Through Jentic you install once, import Kiprio from the API Directory, store the key once, and your agent calls it.
Permission scoping
Kiprio passes its targets as query parameters or body fields, not path ids, so limit the agent to the operations it needs, such as the domain lookups. Rules bound which operations your agent may call, not which domain or text it sends, so redaction, grammar, or screenshot calls are not included unless you add them.
Credential isolation
Your Kiprio key is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'check an SSL certificate' or 'redact PII from text', and Jentic returns the matching Kiprio operation with its input schema so the agent calls the right endpoint without browsing the reference docs.
Alternatives and complements available in the Jentic catalogue.
Specific to using Kiprio API through Jentic.
What authentication does the Kiprio API use?
Per its OpenAPI spec, the Kiprio API takes an API key in the X-API-Key header, and also declares an api_key query parameter scheme. The IP geolocation, QR code, barcode, and hash operations are marked as open and need no key. Through Jentic the key is stored encrypted by your own Jentic One instance and injected at execution time.
Can I redact only some types of PII with the Kiprio API?
Yes. POST /redact accepts a redact field with a comma-separated list of PII types, such as phone,email; omit it to redact all types. Set entities to true to get the position of each detected item in the response.
What are the rate limits for the Kiprio API?
The OpenAPI spec does not specify rate limits. Check the Kiprio documentation at https://kiprio.com for current limits and free tier allowances.
Is there a Kiprio MCP server?
You don't need an MCP server to give your agent the Kiprio API. Jentic connects it directly from the API Directory: import it, store your credential once, and your agent calls the lookup and text operations on demand without loading another server's tool definitions into its context.
Can I limit what my agent is allowed to do with the Kiprio API?
Yes. For example, write a rule that allows only GET /whois, GET /dns-lookup, and GET /ssl, so the agent can inspect domains but cannot send text to the redaction or grammar operations or capture screenshots. Every call it makes through your instance is logged.
How do I check a domain's SSL certificate through Jentic?
Search Jentic for 'check an SSL certificate', load the Kiprio SSL inspection operation, and call GET /ssl with the domain and, if needed, a port. To run it on your own infrastructure, install Jentic One from its GitHub repo.
Which hash algorithms does the Kiprio API support?
GET /hash accepts an algo parameter of md5, sha1, sha256, sha384, sha512, sha3-256, or sha3-512, and defaults to sha256.
For Agents
Look up WHOIS, DNS, SSL, and IP details, validate email addresses, redact PII from text, check grammar, capture screenshots, and generate QR codes, barcodes, and hashes with one Kiprio key.
Use for: Check when the SSL certificate for example.com expires, Get the MX and TXT records for a domain, I want to validate an email address before sending, Redact phone numbers and emails from a support transcript
Not supported: Does not register domains, manage DNS records, send email, or host images. Use for one-off domain, email, IP, and text utility lookups and QR, barcode, and screenshot generation only.
The Kiprio API bundles small utility lookups and converters behind one key: WHOIS, DNS records, and SSL certificate inspection for a domain, email address validation, IP geolocation, and robots.txt parsing. It also redacts PII such as phone numbers and emails from text, checks grammar and spelling with a BCP 47 language tag, captures website screenshots, hashes strings with algorithms from md5 to sha3-512, and generates QR codes and barcodes as images.
This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.
Base layer of spec validity and structural soundness.
Aggregated quality score from linter diagnostics, weighted by severity.
Percentage of `$ref` references that resolve successfully.
Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).
Structural correctness score based on schema issues using logarithmic dampening.
Clarity, completeness, and ingestion readiness for developers and tooling.
How richly the API is illustrated with examples.
Percentage of examples that conform to their schemas.
Percentage of operations with complete response definitions (success, client error, server error).
Health of API ingestion, bundling, and resolution within Jentic pipelines.
Semantic breadth, depth, and agent comprehension for AI systems.
Coverage of descriptions across API elements.
Coverage of RFC 9457 Problem Details for error responses.
Coverage, uniqueness, and casing consistency of operationIds for AI inference.
Coverage of summaries across operations/tags/info.
Functional utility, complexity comfort, and AI orchestration readiness.
Agent comfort level based on API operational and structural complexity.
Trust, risk posture, and security compliance.
Average quality of security schemes based on authentication method strength (weakest link for OAuth2).
Findability, semantic richness, and reasoning readiness.
Clarity and depth of descriptions across API elements.
Score it yourself
Every API in the directory is allowlisted, so you can re-score it with no key required.
npx @jentic/api-scorecard-cli score <openapi-url>