AIToday
Large Language ModelsOpen-Source AIHacker NewsPublished: Jul 28, 2026, 13:01 JST

Underscore launches 20+ APIs for AI agents and developers

Underscore launches 20+ APIs for AI agents and developers

3 Key Points

  1. What happened

    A service called _done has released a collection of over 20 APIs covering networking, security, data lookup, and utility tasks—including ASN lookup, CORS checking, DNS/WHOIS queries, domain age verification, ENS resolution, Hacker News data fetching, cryptographic hashing, HTTP header inspection, JSON processing, OCR, port scanning, and QR code generation.

  2. Why it matters

    Language models and AI agents cannot reliably perform certain operations (hashing, network calls, real-time data fetching) on their own; they generate plausible-looking but often incorrect results. These APIs let AI systems and developers outsource those tasks to reliable, deterministic endpoints, reducing hallucination and avoiding silent failures in security-critical operations like webhook verification or data integrity checks.

  3. What to watch

    The APIs are available via HTTPS POST endpoints (e.g., https://asn-lookup.underscoredone.com/lookup, https://hash-hmac.underscoredone.com/hash) and support bulk operations where applicable (up to 10 domains for DNS/WHOIS, up to 10 URLs for status checks, multiple QR codes in one request).

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The _done suite addresses a fundamental limitation in how AI systems operate: large language models excel at generating human-like text but are unreliable at deterministic, verifiable tasks. When an AI model is asked to compute a cryptographic hash or check whether a domain is registered, it cannot actually perform those operations—it can only produce text that resembles the correct answer. In production systems, this leads to silent failures, broken security checks, and corrupted data integrity. By packaging 20+ utility APIs under a single service, _done offers AI agents and developers a way to outsource these operations to reliable endpoints that always return the same result for the same input.

The APIs span three broad categories: network and domain infrastructure (ASN lookup, DNS/WHOIS, domain age, domain availability, ENS resolution, port scanning, HTTP headers); security and cryptography (CORS checking, hashing and HMAC verification); and data fetching (Hacker News scraping, OCR from images, HTTP requests). Several APIs explicitly acknowledge the hallucination problem—the JSON suite handles the common case where an AI model's JSON output is slightly malformed, and the hash-hmac tool uses timing-safe comparison to prevent secret-leaking attacks that might occur if an untrusted signature check were left to a language model.

The architecture appears designed for integration into AI agent workflows: each API accepts structured input (a domain name, an IP address, a JSON string) and returns deterministic output (status codes, record data, parsed text). Bulk operations reduce the number of requests needed to process many items at once. This lowers latency and cost for applications that rely on AI agents to orchestrate multiple data lookups or network checks as part of a larger task.

FAQ
Can an AI model compute a correct SHA-256 hash on its own?
No. The article states that language models produce a string of the right length and character set that looks correct but is simply wrong. Every webhook verification, idempotency key, cache fingerprint, or integrity check that relies on a hallucinated hash is silently broken—which is why the hash-hmac API exists to verify signatures using constant-time comparison.
What data can I fetch from Hacker News with this tool?
You can request current lists (Top, New, Best, Ask, Show, or Job stories), or fetch every story, job posting, and poll posted on a specific calendar day in the past. You can also optionally pull in nested discussion comments several levels deep.
How many domains or URLs can I check in a single API call?
Most bulk operations support up to 10 items: DNS/WHOIS lookup accepts up to 10 domain names, HTTP status checker accepts up to 10 web addresses, domain availability checker accepts up to 10 domain names, and QR code generator accepts a list of texts (the article cuts off before specifying the exact limit).

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleYunnan Germanium wins major InP wafer order as AI data centers drive optical demand