Examples and recipes
Each recipe runs as is with HIGHLAND_KEY set. Costs are per run, in credits (CAD cents).
Domain security audit (about 10 credits)
DNS, email authentication, HTTPS redirect, security headers and security.txt in one script.
python
import os, json, requests
API = "https://api.highlnd-intel.group/v1/api"
H = {"authorization": f"Bearer {os.environ['HIGHLAND_KEY']}"}
def call(api, **body):
r = requests.post(f"{API}/{api}", headers=H, json=body, timeout=30)
data = r.json()
if not r.ok:
raise SystemExit(f"{api}: {data.get('error')}")
return data["result"]
domain = "example.com"
report = {api: call(api, domain=domain) for api in
["dns-lookup", "mail-auth", "https-redirect", "header-audit", "security-txt", "rdap-lookup"]}
print(json.dumps(report, indent=2))Same audit from the shell
bash
for api in dns-lookup mail-auth https-redirect header-audit security-txt; do
echo "== $api"
curl -s "https://api.highlnd-intel.group/v1/api/$api" \
-H "authorization: Bearer $HIGHLAND_KEY" -H "content-type: application/json" \
-d '{"domain":"example.com"}' | jq '.result'
doneRedact PII before sending text to any LLM
javascript
async function highland(api, body) {
const r = await fetch(`https://api.highlnd-intel.group/v1/api/${api}`, {
method: "POST",
headers: { authorization: `Bearer ${process.env.HIGHLAND_KEY}`, "content-type": "application/json" },
body: JSON.stringify(body),
});
const data = await r.json();
if (!r.ok) throw new Error(`${api}: ${data.error}`);
return data.result;
}
const ticket = "Hi, I'm Jo Smith, card 4111 1111 1111 1111, call me at 902-555-0142.";
const clean = await highland("pii-redact", { text: ticket });
console.log(clean.text, clean.counts); // send clean.text, not the raw ticket, to your modelSummarize any web page
python
page = call("page-markdown", url="https://example.com/blog/post")
summary = call("summarize", text=page["markdown"][:20000])
print(summary["summary"])Retry safely with idempotency keys
python
import uuid
key = str(uuid.uuid4())
for attempt in range(3):
r = requests.post(f"{API}/dns-lookup", headers={**H, "idempotency-key": key}, json={"domain": "example.com"}, timeout=30)
if r.status_code < 500:
break
print(r.json()["replay"]) # True if an earlier attempt had already succeeded; charged onceLint Claude Code config in CI (GitHub Actions)
.github/workflows/claude-config.yml
name: claude-config
on: [pull_request]
jobs:
lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Validate .mcp.json and CLAUDE.md
env:
HIGHLAND_KEY: ${{ secrets.HIGHLAND_KEY }}
run: |
jq '{config: .}' .mcp.json | curl -sf https://api.highlnd-intel.group/v1/api/mcp-config-validate \
-H "authorization: Bearer $HIGHLAND_KEY" -H "content-type: application/json" -d @- | jq .result
jq -n --rawfile t CLAUDE.md '{text:$t}' | curl -sf https://api.highlnd-intel.group/v1/api/claude-md-lint \
-H "authorization: Bearer $HIGHLAND_KEY" -H "content-type: application/json" -d @- | jq .resultAn agent that pays for itself (x402)
javascript
import { wrapFetchWithPayment } from "x402-fetch";
import { privateKeyToAccount } from "viem/accounts";
const pay = wrapFetchWithPayment(fetch, privateKeyToAccount(process.env.AGENT_WALLET_KEY));
const domains = ["example.com", "example.org"];
for (const domain of domains) {
const r = await pay("https://api.highlnd-intel.group/v1/api/mail-auth", {
method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ domain }),
});
console.log(domain, (await r.json()).result);
}Watch your spend
bash
# Password accounts: per-day totals in the browser at https://api.highlnd-intel.group/ (signed in), or GET /v1/usage/daily with the session cookie
curl -s https://api.highlnd-intel.group/v1/account -H "authorization: Bearer $HIGHLAND_KEY" | jq .balanceCents