Link Extractor — extract links from a web page

Extract Links from Webpage API

What it does

Link Extractor takes a web page URL, fetches the page, and returns the absolute URLs of every hyperlink it finds. Send the page address in body.url, and you can also pass a custom user_agent, accept_language, and secure_mode flag when you need to control how the page is fetched.

Use Link Extractor when you need to collect outbound links from a page for crawling, site audits, content analysis, or backlink checks. The response is structured around a data object. For normal pages, it returns data.links, an array of strings containing the extracted URLs.

If secure_mode is enabled and the target URL is flagged as malicious, the response switches to a threat result instead of link data. In that case, data includes the original url, a threat label, and reported_malicious: true. That makes it useful in automation flows where you want to inspect pages before processing them further.

Keep it focused on a single page URL, and use the extracted links as input to downstream crawlers, validators, or indexing jobs.

About this endpoint

What it does

Extracts all hyperlinks from the web page at the provided URL and returns them as absolute URLs. If the URL is identified as malicious when secure_mode is enabled, the response returns a malicious-URL payload instead of extracted links.

Request Body

Parameter	Type	Mandatory	Description
url	String	Yes	The URL of the page to extract links from. Protocol is optional — `http://` is prepended if absent.
user_agent	String	No	Custom User-Agent header sent when fetching the URL.
secure_mode	Boolean	No	When `true`, the URL is checked against the malicious-URL database before fetching. Default: `true`.
accept_language	String	No	Custom Accept-Language header sent when fetching the URL.

Response

Returns a JSON object with a required data field. The data value is an object that can either contain extracted links in a links array of strings, or malicious-URL details with url, threat, and reported_malicious fields.

Parameter	Type	Mandatory	Description
data	Object	Yes	Response payload. Either an object with extracted links, or an object describing a malicious URL.
data.links	String Array	No	Absolute URLs of all hyperlinks found on the page.
data.url	String	No	The detected malicious URL.
data.threat	String	No	The reported threat label.
data.reported_malicious	Boolean	No	Indicates whether the URL was reported as malicious.

Body

Name

Type

Description

bodyREQUIRED

object

—

Extract Links from Webpage API

What it does

QUICKSTART

Quickstart

What you'll get back

About this endpoint

What it does

Request Body

Response

Body

Errors any endpoint can return