See the CMS, framework, analytics and hosting behind any website.
Website Tech Stack Detector identifies the technologies a website runs on, such as its CMS, ecommerce platform, JavaScript framework, analytics, CDN and hosting, with categories and a confidence score for each. Paid plans add detected versions, CPE identifiers and a rendered mode that runs the page's JavaScript.
Try it — live request, no key required
No key required to try it. Get a key to use it in your app.
{
"status": "ok",
"error": null,
"data": {
"url": "https://wordpress.org/",
"finalUrl": "https://wordpress.org/",
"statusCode": 200,
"mode": "static",
"technologyCount": 13,
"technologies": [
{
"name": "WordPress",
"slug": "wordpress",
"categories": [
"CMS",
"Blogs"
],
"version": "7.2",
"confidence": 100,
"implied": false,
"detectedBy": [
"html",
"scriptSrc",
"scripts",
"headers",
"meta",
"dom"
],
"website": "https://wordpress.org",
"icon": "WordPress.svg",
"description": "WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.",
"cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*"
},
{
"name": "WordPress Block Editor",
"slug": "wordpress-block-editor",
"categories": [
"Page builders"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://wordpress.org/gutenberg/",
"icon": "WordPress.svg",
"description": "Sites using the WordPress Block Editor, also known as Gutenberg.",
"cpe": null
},
{
"name": "WordPress Site Editor",
"slug": "wordpress-site-editor",
"categories": [
"Page builders"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://wordpress.org/documentation/article/site-editor/",
"icon": "WordPress.svg",
"description": "Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.",
"cpe": null
},
{
"name": "Gutenberg",
"slug": "gutenberg",
"categories": [
"WordPress plugins",
"Editors"
],
"version": "24.2.0",
"confidence": 100,
"implied": false,
"detectedBy": [
"scriptSrc",
"dom"
],
"website": "https://github.com/WordPress/gutenberg",
"icon": "Gutenberg.png",
"description": "Gutenberg is the code name for the new block based editor introduced in WordPress 5.",
"cpe": null
},
{
"name": "MySQL",
"slug": "mysql",
"categories": [
"Databases"
],
"version": null,
"confidence": 100,
"implied": true,
"detectedBy": [],
"website": "https://mysql.com",
"icon": "MySQL.svg",
"description": "MySQL is an open-source relational database management system.",
"cpe": "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*"
},
{
"name": "PHP",
"slug": "php",
"categories": [
"Programming languages"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"scripts"
],
"website": "https://php.net",
"icon": "PHP.svg",
"description": "PHP is a general-purpose scripting language used for web development.",
"cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"
},
{
"name": "Nginx",
"slug": "nginx",
"categories": [
"Web servers",
"Reverse proxies"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"headers"
],
"website": "https://nginx.org/en",
"icon": "Nginx.svg",
"description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.",
"cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"
},
{
"name": "Google Font API",
"slug": "google-font-api",
"categories": [
"Font scripts"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://fonts.google.com/",
"icon": "Google Font API.svg",
"description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.",
"cpe": null
},
{
"name": "Google Tag Manager",
"slug": "google-tag-manager",
"categories": [
"Tag managers"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://www.google.com/tagmanager",
"icon": "Google Tag Manager.svg",
"description": "Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.",
"cpe": null
},
{
"name": "HSTS",
"slug": "hsts",
"categories": [
"Security"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"headers"
],
"website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1",
"icon": null,
"description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.",
"cpe": null
},
{
"name": "Priority Hints",
"slug": "priority-hints",
"categories": [
"Performance"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://wicg.github.io/priority-hints/",
"icon": "Priority Hints.svg",
"description": "Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.",
"cpe": null
},
{
"name": "Open Graph",
"slug": "open-graph",
"categories": [
"Miscellaneous"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://ogp.me",
"icon": "Open Graph.svg",
"description": "Open Graph is a protocol that is used to integrate any web page into the social graph.",
"cpe": null
},
{
"name": "RSS",
"slug": "rss",
"categories": [
"Miscellaneous"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://www.rssboard.org/rss-specification",
"icon": "RSS.svg",
"description": "RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.",
"cpe": null
}
],
"fingerprintsUpdatedAt": "2026-10-19T01:59:39.005Z"
}
}
About the Website Tech Stack Detector API
Website Tech Stack Detector fetches the page and matches its response headers, cookies, HTML, meta tags, script URLs, inline scripts and DNS records against a fingerprint set of more than 7,000 technologies, refreshed weekly from an open, community-maintained database. Technologies implied by another (WordPress implies PHP) are marked as implied. Rendered mode loads the page in a headless browser so technologies injected by JavaScript, and those only visible as JavaScript globals, are found too.
What people use it for
- Sales Prospecting
- Qualify leads by the platform they run on, such as finding Shopify stores or WordPress sites before outreach.
- Competitor Research
- See which analytics, A/B testing and marketing tools competing sites have installed.
- Security Inventory
- List the software and versions a site exposes, and match CPE identifiers against vulnerability feeds.
- Agency Audits
- Profile a prospect's website stack before a redesign or migration proposal.
Ways to call it
One endpoint, many ways in — REST with JSON, XML, YAML and CSV, plus GraphQL and an MCP interface for AI agents.
- JSON
- Default REST response
- XML
- Markup format
- YAML
- Human-readable
- CSV
- Tabular export
- GraphQL
- Query language
- MCP
- For AI agents
Other ways to use Website Tech Stack Detector
Same data, same APIVerve account, same credit balance — one key works on all of them.
How many technologies can it detect?
What does the Free plan return?
When should I use rendered mode?
How is confidence calculated?
Why does the result include services like Microsoft 365 or DocuSign?
How many lookups does the Starter plan cover?
Request parameters — GET /v1/techstackdetector
Sent in the query string. Premium parameters are accepted on every plan but only take effect on plans that include them. Anything not listed here is dropped rather than passed through.
Required
| Parameter | Type | Example | Description |
|---|---|---|---|
urlRequired | string | https://wordpress.org | The URL of the website to analyze url |
Optional
| Parameter | Type | Example | Description |
|---|---|---|---|
renderOptionalPremium | boolean | true | Load the page in a headless browser first, to find technologies added by JavaScript and read JavaScript globals. Slower default false |
curl "https://api.apiverve.com/v1/techstackdetector?url=https%3A%2F%2Fwordpress.org&render=true" \
-H "x-api-key: YOUR_API_KEY"Authentication
Send your key in the x-api-key header. That is the only auth step — no token exchange, and no per-endpoint scope to configure.
| Header | When | Value |
|---|---|---|
x-api-keyRequired | Every request | Your API key. Header names are case-insensitive, so X-API-Key is the same header. |
AuthorizationAlternate | Instead of the above | Bearer <key> — for clients that only expose bearer auth. Resolves to the same account and the same billing. |
A 401 means the key is missing, invalid or expired. A 403 means the key is valid but not permitted here — blocked by a key restriction or an IP allow-list. Running out of credits is a 429.
Response — GET /v1/techstackdetector
Every APIVerve endpoint returns the same three top-level keys, so one response handler covers your whole integration: status, error and data. Only data changes shape.
{
"status": "ok",
"error": null,
"data": {
"url": "https://wordpress.org/",
"finalUrl": "https://wordpress.org/",
"statusCode": 200,
"mode": "static",
"technologyCount": 13,
"technologies": [
{
"name": "WordPress",
"slug": "wordpress",
"categories": [
"CMS",
"Blogs"
],
"version": "7.2",
"confidence": 100,
"implied": false,
"detectedBy": [
"html",
"scriptSrc",
"scripts",
"headers",
"meta",
"dom"
],
"website": "https://wordpress.org",
"icon": "WordPress.svg",
"description": "WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.",
"cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*"
},
{
"name": "WordPress Block Editor",
"slug": "wordpress-block-editor",
"categories": [
"Page builders"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://wordpress.org/gutenberg/",
"icon": "WordPress.svg",
"description": "Sites using the WordPress Block Editor, also known as Gutenberg.",
"cpe": null
},
{
"name": "WordPress Site Editor",
"slug": "wordpress-site-editor",
"categories": [
"Page builders"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://wordpress.org/documentation/article/site-editor/",
"icon": "WordPress.svg",
"description": "Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.",
"cpe": null
},
{
"name": "Gutenberg",
"slug": "gutenberg",
"categories": [
"WordPress plugins",
"Editors"
],
"version": "24.2.0",
"confidence": 100,
"implied": false,
"detectedBy": [
"scriptSrc",
"dom"
],
"website": "https://github.com/WordPress/gutenberg",
"icon": "Gutenberg.png",
"description": "Gutenberg is the code name for the new block based editor introduced in WordPress 5.",
"cpe": null
},
{
"name": "MySQL",
"slug": "mysql",
"categories": [
"Databases"
],
"version": null,
"confidence": 100,
"implied": true,
"detectedBy": [],
"website": "https://mysql.com",
"icon": "MySQL.svg",
"description": "MySQL is an open-source relational database management system.",
"cpe": "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*"
},
{
"name": "PHP",
"slug": "php",
"categories": [
"Programming languages"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"scripts"
],
"website": "https://php.net",
"icon": "PHP.svg",
"description": "PHP is a general-purpose scripting language used for web development.",
"cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"
},
{
"name": "Nginx",
"slug": "nginx",
"categories": [
"Web servers",
"Reverse proxies"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"headers"
],
"website": "https://nginx.org/en",
"icon": "Nginx.svg",
"description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.",
"cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"
},
{
"name": "Google Font API",
"slug": "google-font-api",
"categories": [
"Font scripts"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://fonts.google.com/",
"icon": "Google Font API.svg",
"description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.",
"cpe": null
},
{
"name": "Google Tag Manager",
"slug": "google-tag-manager",
"categories": [
"Tag managers"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"html"
],
"website": "https://www.google.com/tagmanager",
"icon": "Google Tag Manager.svg",
"description": "Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.",
"cpe": null
},
{
"name": "HSTS",
"slug": "hsts",
"categories": [
"Security"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"headers"
],
"website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1",
"icon": null,
"description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.",
"cpe": null
},
{
"name": "Priority Hints",
"slug": "priority-hints",
"categories": [
"Performance"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://wicg.github.io/priority-hints/",
"icon": "Priority Hints.svg",
"description": "Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.",
"cpe": null
},
{
"name": "Open Graph",
"slug": "open-graph",
"categories": [
"Miscellaneous"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://ogp.me",
"icon": "Open Graph.svg",
"description": "Open Graph is a protocol that is used to integrate any web page into the social graph.",
"cpe": null
},
{
"name": "RSS",
"slug": "rss",
"categories": [
"Miscellaneous"
],
"version": null,
"confidence": 100,
"implied": false,
"detectedBy": [
"dom"
],
"website": "https://www.rssboard.org/rss-specification",
"icon": "RSS.svg",
"description": "RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.",
"cpe": null
}
],
"fingerprintsUpdatedAt": "2026-10-19T01:59:39.005Z"
}
}
Response fields
Paths are relative to data. Premium fields are absent rather than zeroed on plans that do not include them, so check for presence instead of comparing to 0.
| Field | Type | Example | Description |
|---|---|---|---|
url | string | "https://wordpress.org/" | The URL that was requested |
finalUrl | string | "https://wordpress.org/" | The URL after redirects |
statusCode | number | 200 | HTTP status the website returned |
mode | string | "static" | static for a plain fetch, rendered when the page was loaded in a browser |
technologyCount | number | 13 | Number of technologies detected |
technologies | array[13] | Detected technologies, most significant categories first | |
name | string | "WordPress" | Technology name, such as WordPress |
slug | string | "wordpress" | URL-safe identifier for the technology, such as wordpress |
categories | array | [CMS, ...] | Categories the technology belongs to, such as CMS or Analytics |
versionPremium | string | "7.2" | Detected version, when the page reveals one |
confidence | number | 100 | Confidence from 0 to 100 that the technology is present |
implied | boolean | false | True when the technology was inferred from another detection rather than seen directly |
detectedBy | array | [html, ...] | Signals that matched: url, html, scriptSrc, scripts, css, text, headers, cookies, meta, dns, js or dom. Empty for implied technologies |
website | string | "https://wordpress.org" | The technology's official website |
icon | string | "WordPress.svg" | Icon file name in the open fingerprint database's icon set |
description | string | "WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include … | Short description of the technology |
cpePremium | string | "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*" | CPE 2.3 identifier for matching against vulnerability databases, when one exists |
fingerprintsUpdatedAt | string | "2026-10-19T01:59:39.005Z" | ISO 8601 timestamp of the fingerprint database refresh used |
Response headers
Every response carries your balance, so your own code always knows where it stands without polling anything. All four are exposed to browsers through CORS.
| Header | What it carries |
|---|---|
x-api-remaining-credits | Credits left in the current cycle |
x-api-credits-used | Credits spent in the current cycle |
x-api-max-credits | The allowance for the cycle |
x-api-version | Version of the endpoint that answered |
Errors
Read the HTTP status first, then error for the specific reason. The body names the parameter that has to change.
| Status | Meaning | What to do |
|---|---|---|
400 | Input was rejected | Read error; it names the parameter that has to change. |
401 | Key missing or invalid | Check the header name and the key value. |
403 | Key valid, but not permitted here | A key restriction or an IP allow-list — never a bad key. |
429 | Rate limited, or out of credits | Read error to tell them apart, then back off or top up. |
What a call costs — 30 credits per call
Credits are shared across every APIVerve API — one balance, one key, one bill. Failed requests never count against it, so a rejected input costs nothing.
| Plan | Per month | Credits | Website Tech Stack Detector calls | Per 1,000 calls |
|---|---|---|---|---|
| Free | Free | 200 | 6 | Free |
| Starter | $29.99 | 200,000 | 6,666 | $4.50 |
| Pro | $99.99 | 1,000,000 | 33,333 | $3.00 |
| Mega | $299.99 | 4,000,000 | 133,333 | $2.25 |
Calls are what the credits buy at this API's rate — spend them here, on any of the other APIs, or across both. Nothing is reserved per endpoint.
Call it from cURL — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
curl "https://api.apiverve.com/v1/techstackdetector" \
-H "x-api-key: YOUR_API_KEY"Resources
Call it from Node.js — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
const res = await fetch("https://api.apiverve.com/v1/techstackdetector", {
headers: { "x-api-key": "YOUR_API_KEY" },
});
const { data } = await res.json();
console.log(data);Resources
Call it from Python — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
import requests
res = requests.get(
"https://api.apiverve.com/v1/techstackdetector",
headers={"x-api-key": "YOUR_API_KEY"},
)
print(res.json()["data"])Resources
Call it from C# / .NET — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
using var client = new HttpClient();
client.DefaultRequestHeaders.Add("x-api-key", "YOUR_API_KEY");
var json = await client.GetStringAsync("https://api.apiverve.com/v1/techstackdetector");
Console.WriteLine(json);Resources
Call it from Go — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
req, _ := http.NewRequest("GET", "https://api.apiverve.com/v1/techstackdetector", nil)
req.Header.Set("x-api-key", "YOUR_API_KEY")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))Resources
Call it from PHP — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
$ch = curl_init("https://api.apiverve.com/v1/techstackdetector");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-api-key: YOUR_API_KEY"]);
$response = curl_exec($ch);
echo $response;Resources
Call it from Ruby — GET /v1/techstackdetector
No SDK to install — this is a plain HTTPS call to /v1/techstackdetector with your key in the x-api-key header. Swap in a real key and it runs as-is.
require "net/http"
uri = URI("https://api.apiverve.com/v1/techstackdetector")
req = Net::HTTP::Get.new(uri)
req["x-api-key"] = "YOUR_API_KEY"
res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |h| h.request(req) }
puts res.bodyResources
Zero-code embed — one snippet, no backend
Drop an interactive Website Tech Stack Detector form onto any page. The widget calls the API for you, so no key ever appears in your markup and there is nothing to deploy.
Changelog — Website Tech Stack Detector API
Every change to this endpoint, newest first. Breaking changes ship as a new version and the previous one keeps serving — response fields are added, never removed or retyped in place, so an integration written against v1 keeps working.
Entries are picked up from dated catalog snapshots, so the first one appears after the next snapshot that moves something. A period where nothing changed produces no entry — silence is a valid changelog for the Website Tech Stack Detector API.
Data Scraping
- Contact Extractor
- Link Scraper
- SEO Data Scraper
- Website Images Scraper
- Website Screenshot
- Website Tech Stack Detector