> For the complete documentation index, see [llms.txt](https://docs.dos.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dos.ai/dosafe/overview.md).

# Overview

DOSafe is the safety and threat intelligence engine for the DOS ecosystem. It aggregates data from **19+ sources** with over **3.93 million threat intelligence entries** to provide real-time risk assessments for entities such as domains, URLs, wallets, phone numbers, and more.

## Key Capabilities

* **Entity check** -- Assess the risk of a single entity against the threat intelligence database, on-chain attestations, and DOS.Me identity data.
* **Bulk check** -- Evaluate up to 50 entities in a single request.
* **URL check** -- Analyze a URL for phishing, scam, and malware indicators.
* **AI text detection** -- Determine whether a piece of text was generated by AI.
* **AI image detection** -- Determine whether an image was generated or manipulated by AI.
* **AI video detection** -- Analyze video for AI-generated content using a 7-layer pipeline (frame analysis, temporal consistency, audio-visual sync, LLM visual reasoning).
* **AI audio detection** -- Detect AI-generated speech and voice clones using BEATs + mHuBERT ensemble (AUROC 0.88).
* **Face verification** -- Liveness detection and face matching for identity verification.

## Supported Entity Types

| Type           | Example                  |
| -------------- | ------------------------ |
| `domain`       | `evil.com`               |
| `url`          | `https://evil.com/phish` |
| `wallet`       | `0xdeadbeef...`          |
| `phone`        | `+84901234567`           |
| `bank_account` | `VCB:1234567890`         |
| `email`        | `scammer@evil.com`       |
| `facebook`     | `fakeshop.vn`            |

## API Endpoints

All DOSafe endpoints use the base URL `https://api.dos.ai/v1/dosafe`.

| Method | Endpoint                  | Description                        |
| ------ | ------------------------- | ---------------------------------- |
| POST   | `/v1/dosafe/check`        | Single entity safety check         |
| POST   | `/v1/dosafe/check/bulk`   | Bulk entity check (max 50)         |
| POST   | `/v1/dosafe/url-check`    | URL/domain safety check            |
| POST   | `/v1/dosafe/detect`       | AI text detection                  |
| POST   | `/v1/dosafe/detect-image` | AI image detection                 |
| POST   | `/v1/dosafe/detect-video` | AI video detection                 |
| POST   | `/v1/dosafe/detect-audio` | AI audio/voice detection           |
| POST   | `/v1/dosafe/face/enroll`  | Face enrollment for verification   |
| POST   | `/v1/dosafe/face/verify`  | Face liveness + match verification |
| POST   | `/v1/dosafe/voice/enroll` | Voice enrollment for speaker ID    |
| POST   | `/v1/dosafe/voice/verify` | Voice speaker verification         |

## Authentication

DOSafe endpoints accept authentication via the `X-Api-Key` header:

```
X-Api-Key: your_api_key_here
```

Alternatively, if you already have a DOS AI API key (`dos_sk_*`), you can use the standard `Authorization` header:

```
Authorization: Bearer dos_sk_...
```

Anonymous access is available with a limited daily quota for evaluation purposes.

## Risk Scoring

Risk scores range from 0 to 100 and map to the following levels:

| Score   | Level      |
| ------- | ---------- |
| 0--19   | `safe`     |
| 20--49  | `low`      |
| 50--74  | `medium`   |
| 75--89  | `high`     |
| 90--100 | `critical` |

Scores are computed by weighted aggregation of signals from multiple data sources. No single source determines the final verdict.

### Data Sources

| Source           | Description                                                                |
| ---------------- | -------------------------------------------------------------------------- |
| DOSafe Threat DB | 3.93M+ entries from 19 scrapers covering phishing, scam, malware, and spam |
| DOS Chain        | Immutable on-chain risk attestations via EAS                               |
| DOS.Me Identity  | Member trust scores, verified providers, and flagged status                |
| Web Analysis     | Real-time web search and LLM-powered risk analysis                         |

## Quick Example

### Check an entity

```bash
curl -X POST https://api.dos.ai/v1/dosafe/check \
  -H "X-Api-Key: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "entityType": "domain",
    "entityId": "suspicious-site.com"
  }'
```

**Response:**

```json
{
  "entityType": "domain",
  "entityId": "suspicious-site.com",
  "riskScore": 85,
  "riskLevel": "high",
  "flagged": true,
  "signals": ["db_flagged_phishing"],
  "categories": ["phishing"],
  "sources": ["phishing_database"],
  "checkedAt": "2026-03-24T10:00:00Z"
}
```

### Check a URL

```bash
curl -X POST https://api.dos.ai/v1/dosafe/url-check \
  -H "X-Api-Key: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://suspicious-site.com/login"
  }'
```

### Bulk check

```bash
curl -X POST https://api.dos.ai/v1/dosafe/check/bulk \
  -H "X-Api-Key: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "entities": [
      { "entityType": "wallet", "entityId": "0xdeadbeef..." },
      { "entityType": "phone", "entityId": "+84901234567" }
    ]
  }'
```

## Next Steps

* [DOSafe Partner API Reference](/dosafe/partner-api.md) -- Full endpoint documentation with request/response schemas and signal reference.
* [Error Codes](/support/error-codes.md) -- Common error responses and how to handle them.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.dos.ai/dosafe/overview.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
