Submitting is deliberately incomplete as a form.
- Go to /submit.
- Enter a domain or URL, such as
example.com. - Wait for the scan.
Do not send a name, description, icon, screenshots, category, or developer field. If those cannot be discovered from the site, they stay unavailable.
Anyone may submit a public domain. Submitting does not grant the submitter control over that domain’s registry metadata.
What happens
The same validation engine used by /check runs. If the result is PASS or PASS WITH WARNINGS, the app is added (or an existing record is updated). If the result is FAIL, nothing is added and the report explains why.
Protections
The crawler is not a proxy. It refuses:
- localhost and private / link-local / unique-local IP ranges
- cloud metadata endpoints
- credentials in URLs
- non-HTTPS fetches
- redirect chains that leave HTTPS or land on private addresses
- oversized HTML, manifests, and images
- unbounded redirect hops
Repeated submissions from the same network are rate limited.