GoDaddy Abuse API

Name: GoDaddy Abuse API API
Brand: Abuse API
Availability: InStock

✓ Official Vendor SpecSecurityThreat Detectionnone6 EndpointsREST

For Agents

File abuse reports against domains and content hosted by GoDaddy and check the status of submitted tickets. Agents can submit phishing, malware, and copyright complaints via a structured intake.

Connect the GoDaddy Abuse API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the GoDaddy Abuse API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with GoDaddy Abuse API API.

Submit a structured abuse ticket with reporter, type, and target details

Retrieve a previously submitted ticket by ticket ID

List the abuse tickets a reporter has filed

Differentiate v1 and v2 ticket schemas as the reporting model evolves

GET STARTED

Start building with GoDaddy Abuse API API

Explore with Jentic

View OpenAPI Document

Use Cases

Patterns agents use GoDaddy Abuse API API for, with concrete tasks.

★ Automated Phishing Takedown Reporting

Brand protection and threat intelligence teams file phishing reports against GoDaddy-hosted impersonation sites at machine speed. POST /v2/abuse/tickets accepts the structured payload — abuser domain, reporter contact, target URL, and evidence — and returns a ticket ID that the system polls via GET /v2/abuse/tickets/{ticketId}. Integration usually takes a day for a single report type and is well-suited to phishing feed automation.

File a phishing ticket against 'phish.example' by POSTing the abuse payload (type='PHISHING', target, reporter contact) to /v2/abuse/tickets and capture the returned ticket ID.

Rights holders and their agents file copyright complaints against GoDaddy-hosted content via POST /v2/abuse/tickets with the COPYRIGHT type. Subsequent GET calls track each ticket through GoDaddy's review process. This replaces email-based DMCA submissions with a structured intake that fits inside an automated workflow.

Submit a copyright complaint by POSTing to /v2/abuse/tickets with type='COPYRIGHT', the infringing URL, and the rights holder contact details.

Threat Intel Ticket Tracking

Security operations centres that file dozens of GoDaddy abuse reports a week need a way to track each through to resolution. GET /v2/abuse/tickets returns the list of tickets the caller has filed, and GET /v2/abuse/tickets/{ticketId} returns full status. SOC dashboards consume these endpoints on a polling cadence to surface stuck or escalated cases.

Poll GET /v2/abuse/tickets/abc123 once an hour until the returned status moves out of 'OPEN'.

AI Agent Abuse Reporting via Jentic

Agents that monitor brand mentions and threat feeds can submit abuse reports without operators copying tickets manually. Through Jentic, the agent searches for 'submit a GoDaddy abuse ticket', loads the POST /v2/abuse/tickets schema, and executes the call with credentials held in the vault. This streamlines the path from detection to takedown request.

Use Jentic to search 'submit a GoDaddy abuse ticket', load the POST /v2/abuse/tickets schema, and execute it with the phishing details extracted from the threat feed.

Key Endpoints

6 endpoints — the godaddy abuse api (ote — operational test environment) is the abuse reporting interface for properties hosted with godaddy.

METHOD

PATH

DESCRIPTION

POST

/v2/abuse/tickets

Submit a v2 abuse ticket

GET

/v2/abuse/tickets

List v2 abuse tickets you have submitted

GET

/v2/abuse/tickets/{ticketId}

Retrieve a specific v2 abuse ticket

POST

/v1/abuse/tickets

Submit a legacy v1 abuse ticket

GET

/v1/abuse/tickets

List legacy v1 abuse tickets

GET

/v1/abuse/tickets/{ticketId}

Retrieve a specific v1 abuse ticket

POST

/v2/abuse/tickets

Submit a v2 abuse ticket

GET

/v2/abuse/tickets

List v2 abuse tickets you have submitted

GET

/v2/abuse/tickets/{ticketId}

Retrieve a specific v2 abuse ticket

POST

/v1/abuse/tickets

Submit a legacy v1 abuse ticket

GET

/v1/abuse/tickets

List legacy v1 abuse tickets

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

GoDaddy SSO key/secret pairs are stored encrypted in the Jentic vault. Agents receive scoped access tokens — the raw 'sso-key' Authorization header value never enters the agent's context.

Intent-based discovery

Agents search by intent (e.g. 'submit a phishing report') and Jentic returns the matching GoDaddy abuse operation with its input schema, so the agent picks /v2/abuse/tickets and the right type without browsing the GoDaddy reference.

Time to first call

Direct GoDaddy Abuse API integration: 1-2 days to wire SSO auth, ticket submission, and status polling. Through Jentic: under 1 hour — search, load schema, execute.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

GoDaddy Domains API

Domains API resolves and inspects the registration of a domain that an Abuse ticket targets.

Use the Domains API to enrich a target domain's registration before filing; use the Abuse API to file the ticket itself.

Complementary

GoDaddy Shoppers API

Shoppers API exposes shopper account context that may accompany an abuse case.

Use the Shoppers API when an abuse case requires a shopper-level reference; use the Abuse API to file the ticket.

Complementary

Sentry API

Sentry tracks operational issues in the abuse-reporting pipeline that posts tickets to GoDaddy.

Use Sentry to investigate failures in the integration; use the Abuse API to file or look up the underlying ticket.

FAQs

Specific to using GoDaddy Abuse API API through Jentic.

What authentication does the GoDaddy Abuse API use?

The OpenAPI spec does not declare a security scheme, but in practice the GoDaddy public API is gated by an SSO key/secret pair passed as 'Authorization: sso-key <KEY>:<SECRET>' on each request. Through Jentic the SSO key/secret are stored encrypted in the vault and injected at call time, so the credential never enters the agent's context.

Can I submit a phishing report through the API?

Yes. POST /v2/abuse/tickets accepts a payload with type='PHISHING', target URL, reporter contact, and evidence. The response includes the ticketId you use to poll status via GET /v2/abuse/tickets/{ticketId}. The legacy /v1/abuse/tickets endpoints accept a similar payload for older integrations.

What are the rate limits for the GoDaddy Abuse API?

GoDaddy applies SSO-key based throttling across its API surface but does not document specific limits in the abuse OpenAPI spec. Excessive callers should expect 429 responses with Retry-After hints. For high-volume reporting, batch calls and back off on 429.

How do I check the status of a ticket through Jentic?

Through Jentic, search for 'check abuse ticket status', load the GET /v2/abuse/tickets/{ticketId} schema, and execute it with the ticketId returned from the original submission. Jentic injects the SSO key/secret from the vault.

What abuse types can I report?

The v2 ticket schema supports phishing, malware, child sexual abuse material (CSAM), network abuse, copyright, and spam. Each type has the same endpoint and differs only in the type field of the payload.

Is the GoDaddy Abuse API free to use?

Yes. The Abuse API is provided to streamline reporting and there is no per-call charge. An active GoDaddy account with API SSO credentials is required to authenticate; the OTE base URL is the operational test environment for development.