Skip to content
clonesite.ai
Menu
All updates
New

Clone websites from your code or AI agent

Start a website clone with one API call. Sign in with an API key or OAuth, and get a signed webhook when the clone is ready or fails.

A robot arm turning a key in a server, looped back to a webhook bell

A website clone API for apps and agents

The Clone API lets your app, script or AI agent start a website clone and hear back when it's done — no browser needed.

Sign in with an API key or OAuth

  • API key: create one on the Developers page and send it as a Bearer token.
  • OAuth 2: apps and agents can register themselves and ask the user for access. Discovery is at /.well-known/oauth-authorization-server.
  • No key to paste: an agent can ask you to confirm a 6-digit code instead. See auth.md.

Access is split into scopes — create clone requests, read them — so each tool only gets what it needs.

Start a clone, then get a webhook

  1. POST /api/v1/clone-requests with the source URL and an Idempotency-Key, so a retry never starts a second clone.
  2. Check progress with GET /api/v1/clone-requests/{id}, or just wait.
  3. We call your callbackUrl with clone.ready or clone.failed. Every webhook is signed with HMAC-SHA256 (Standard Webhooks). If your server is down, we retry up to six times over about 14 hours.

Test for free

A preflight call checks your key, request and webhook setup without charging. A test run goes through the whole flow — real signed webhooks included — for zero credits.

Use it from an AI agent with MCP

An MCP server at /mcp gives agents like Claude the same actions as tools, so they can start and track clones on their own.

Pricing and limits

Each clone costs credits from the same balance as the website, and a failed clone gives its credits back automatically. Each API key can make 60 requests a minute. The full reference is in the Clone API guide.

Also in this release

  • NewTest runs and preflight checks are free
  • NewAn MCP server so AI agents can clone sites directly
  • NewGuides in seven languages

Common questions

How do I authenticate with the Clone API?

Use an API key from the Developers page as a Bearer token, or OAuth 2 if you're building an app or agent that acts for other users.

Can I test the API without spending credits?

Yes. Preflight checks are free, and a test run sends real signed webhooks for zero credits.

How do I verify a webhook signature?

Compute HMAC-SHA256 with your `whsec_` secret over `webhook-id.webhook-timestamp.body`, base64 it, and compare it with the `v1,` value in the `webhook-signature` header. Use `webhook-id` to skip duplicates.

What if my server is down when a clone finishes?

We retry up to six times over about 14 hours. Any 2xx response counts as delivered; redirects don't.

Can an AI agent use clonesite?

Yes — through the MCP server at `/mcp`, or the API with OAuth or the 6-digit confirmation flow.

Is there a rate limit?

60 requests a minute per API key. Above that you get a 429 response.

Read the Clone API guide