{
  "status": "ok",
  "service": "ct-attack-surface",
  "endpoints": [
    "GET /health",
    "GET /stats",
    "GET /subdomains?domain=&refresh=&include_expired=&flags=&limit=",
    "GET /certs?domain=&since=&refresh=&limit=",
    "GET /diff?domain=&since=&refresh=&limit=",
    "GET /monitor",
    "POST /monitor {\"domain\": \"...\"}"
  ]
}