Lookup

GET /v1/lookup — Returns detected technologies, SDK summary, and app metadata for a desktop application.

API at a glance

• Base URL: https://desktopinsights.com/api/v1/lookup
• Method: GET
• Auth: Authorization: Bearer <API_KEY>
• Required param: app (string) — app name or bundle ID
• Optional param: platform — macos or windows
• Response: JSON with data[] array containing app, sdkSummary, and technologies objects

Parameters

Example request

curl "https://desktopinsights.com/api/v1/lookup?app=Notion&platform=macos" \
  -H "Authorization: Bearer di_live_your_key_here"

Response

{
  "data": [{
    "app": {
      "name": "Notion",
      "bundleId": null,
      "slug": "notion",
      "developer": "Notion Labs, Incorporated",
      "developerWebsite": null,
      "platform": "macos",
      "currentVersion": "7.9.0",
      "runtime": "electron",
      "electronVersion": "39.6.0",
      "chromiumVersion": null,
      "nodeVersion": null,
      "dependencyCount": 45,
      "appSizeBytes": 285253632,
      "architectures": ["arm64"],
      "minOsVersion": "12.0",
      "localizations": ["en", "ja", "de", "fr", "..."],
      "extractedAt": "2026-03-29T20:57:11.783Z",
      "signed": true,
      "notarized": true,
      "installerType": null,
      "bundledLibraryCount": 3
    },
    "sdkSummary": {
      "errorTrackingSdk": null,
      "analyticsSdk": null,
      "featureFlagSdk": null,
      "databaseSdk": "SQLite",
      "uiFramework": "React",
      "stateManagement": "Redux",
      "paymentsSdk": null,
      "authSdk": null,
      "observabilitySdk": "electron-log",
      "realtimeSdk": null,
      "autoUpdateSdk": "electron-updater"
    },
    "technologies": [{
      "name": "Electron",
      "version": "39.6.0",
      "category": "Runtime",
      "confidence": 100
    }, {
      "name": "React",
      "version": "16.13.1",
      "category": "UI Framework",
      "confidence": 80
    }, {
      "name": "Redux",
      "version": "2.2.3",
      "category": "State Management",
      "confidence": 80
    }, {
      "name": "SQLite",
      "version": "12.4.6",
      "category": "Database",
      "confidence": 80
    }, {
      "name": "electron-updater",
      "version": "4.1.2",
      "category": "Auto-Update",
      "confidence": 80
    }]
  }],
  "meta": {
    "requestId": "req_f0480c69",
    "resultCount": 1,
    "query": "Notion",
    "platform": "macos"
  }
}

App object

Always present in the response.

SDK summary object

Flat object with one field per major SDK category. Designed to map directly to Clay table columns. null means no SDK was detected in that category.

Technologies array

Detailed list of detected technologies with version and confidence information.

Name matching

The API resolves app names in four steps:

1. Alias check — common alternative names are resolved first (e.g., VS Code → Code, Zoom → zoom.us, Figma → figma-desktop)
2. Exact match — case-insensitive name match (e.g., Slack)
3. Slug match — matches URL-safe slug prefix (e.g., Figma matches figma-desktop)
4. Fuzzy match — contains match (e.g., Code finds Code, CodeBuddy, etc.)

For best results, use the exact app name as displayed in the macOS Applications folder or Windows Start menu. Common names like "VS Code", "Zoom", and "Figma" are handled automatically.

Advisories (beta)

Beta. The advisory/KEV signal is a beta feature available to authenticated API keys. Every response object carries "beta": true. The shape may change; do not build hard dependencies on it yet.

Add include=advisories to attach known-advisory exposure for the app's bundled dependencies, derived from public sources (OSV advisories + the CISA Known Exploited Vulnerabilities catalog). Data reflects the current inventory; there is no separate derivation — it reuses the same signal that powers our internal exposure tracking.

curl "https://desktopinsights.com/api/v1/lookup?app=Notion&platform=macos&include=advisories" \
  -H "Authorization: Bearer di_live_your_key_here"

The advisories object (present only when the app has been scanned):

advisoriesSignal sits alongside the object: "scanned" when the app has advisory data, "not-scanned" when it has never been scanned (in which case advisories is null — absence is never reported as "no advisories").

Coming soon

The following capabilities are under development:

• include modules for controlling response depth (dependencies, security, compliance, scores)
• Batch lookups (multiple apps per request)
• apps parameter for batch requests