> ## Documentation Index > Fetch the complete documentation index at: https://docs.paywithlocus.com/llms.txt > Use this file to discover all available pages before exploring further. # Run Web Search > Searches eligible providers in parallel, canonicalizes and deduplicates URLs, fuses rankings, and returns per-result source provenance. The charge is the sum of successful underlying calls. ## OpenAPI ````yaml /api-reference/openapi.json post /wrapped/credits/router/web-search openapi: 3.1.0 info: title: Locus Pro API description: >- Access paid tools, manage prepaid balances, and build usage billing. Send money as exact decimal strings and reuse Idempotency-Key on retries. Management routes require a scoped server key or authorized dashboard session. Sensitive workspace changes require an owner or admin with recent MFA or passkey verification, except where an operation documents a stricter boundary. Interactive agents use MCP OAuth; unattended agents use scoped Agent Connections. Browser widgets use end-user tokens. version: 0.7.0 servers: - url: https://api.paywithlocus.com/api description: Production - url: https://api.stage.paywithlocus.com/api description: Stage — evaluation and integration testing security: - secretKey: [] tags: - name: Authentication description: Email-verified self-serve account creation and dashboard identity - name: Tenants description: Tenant profile, keys, and settings (dashboard session or secret key) - name: Workspace members description: Invite-only human workspace membership and role administration - name: Catalog description: Enable/disable APIs and set markups - name: Custom APIs description: Feature-gated enterprise BYOK providers and schema-backed custom actions - name: End users description: End-user accounts, tokens, and allocations - name: Top-ups description: Locus-hosted checkout top-ups and quotes - name: Ledger description: Burn/top-up history and earnings - name: Webhooks description: Signed events, delivery inspection, and replay - name: Burn description: Metered pay-per-use calls - name: MCP description: Stateless Streamable HTTP transport and MCP tool-result contracts - name: Okibi Identity description: >- Feature-gated Okibi identity verification and scoped native CLI credential bootstrap - name: Widget description: End-user JWT surface; a matching publishable key is optional - name: Agent-native onboarding description: >- Self-registration, human Stripe funding handoff, and restricted account setup for headless agents - name: Hosted Workflows description: >- Tenant-private TypeScript Workflow definitions, immutable versions, bounded runs, artifacts, and recovery - name: Agent connections description: Scoped, expiring, revocable credentials for agent execution - name: Recipes description: >- Search, research, extraction, enrichment, and travel outcomes across providers paths: /wrapped/credits/router/web-search: post: tags: - Recipes summary: Run Web Search description: >- Searches eligible providers in parallel, canonicalizes and deduplicates URLs, fuses rankings, and returns per-result source provenance. The charge is the sum of successful underlying calls. parameters: - $ref: '#/components/parameters/SessionBindingHeader' - name: Idempotency-Key in: header required: true schema: type: string minLength: 1 maxLength: 255 description: Reuse the same value only when retrying the same logical request. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/LocusWebSearchRequest' responses: '200': description: Result, sources, and billing receipt content: application/json: schema: $ref: '#/components/schemas/LocusWebSearchResponse' '400': $ref: '#/components/responses/BadRequest' '402': description: Insufficient credits '403': description: Capability, provider, policy, or spend limit denied the request '409': description: The aggregate tenant-aware estimate exceeds maxCredits security: - secretKey: [] - endUserToken: [] - agentConnection: [] components: parameters: SessionBindingHeader: name: X-Locus-Session-Id in: header required: false schema: type: string minLength: 16 maxLength: 128 pattern: ^[A-Za-z0-9][A-Za-z0-9._:-]{15,127}$ description: >- Required only when the end-user JWT carries sid. Send the original high-entropy session value; sid is its SHA-256 fingerprint. Ignored for secret-key authentication. schemas: LocusWebSearchRequest: type: object properties: query: type: string pattern: ^\s*(?:\S|\S[\s\S]{0,398}\S)\s*$ description: Search or research request. maxResults: type: integer minimum: 1 maximum: 20 default: 10 mode: type: string enum: - fast - balanced - comprehensive default: balanced maxProviders: type: integer minimum: 1 maximum: 13 default: 4 strategy: type: string enum: - balanced - cost - quality - speed description: Legacy mode selector retained for compatible clients. topic: type: string enum: - general - news default: general recencyDays: type: integer minimum: 1 maximum: 365 country: type: string pattern: ^[A-Za-z]{2}$ includeDomains: type: array maxItems: 20 items: type: string minLength: 1 pattern: \S excludeDomains: type: array maxItems: 20 items: type: string minLength: 1 pattern: \S includeImages: type: boolean default: false providers: type: array maxItems: 13 items: type: string pattern: >- ^\s*(?:[aA][gG][eE][nN][tT]402|[aA][gG][eE][nN][tT][sS][tT][oO][oO][lL][sS]|[aA][nN][dD][iI]|[bB][rR][aA][vV][eE]|[dD][aA][tT][aA][fF][oO][rR][sS][eE][oO]|[eE][xX][aA]|[fF][iI][rR][eE][cC][rR][aA][wW][lL]|[lL][iI][nN][kK][uU][pP]|[pP][aA][rR][aA][lL][lL][eE][lL]|[pP][eE][rR][pP][lL][eE][xX][iI][tT][yY]|[sS][eE][lL][tT][zZ]|[sS][eE][rR][pP][eE][rR]|[tT][aA][vV][iI][lL][yY])\s*$ description: >- Provider ID. Available values: agent402, agentstools, andi, brave, dataforseo, exa, firecrawl, linkup, parallel, perplexity, seltz, serper, tavily. Matching ignores case and surrounding whitespace. maxCredits: oneOf: - type: string pattern: >- ^\s*(?=[0-9.]{1,100}\s*$)0*(?:(?:[1-9]\d{0,11})(?:\.\d{1,6})?|1000000000000(?:\.0{1,6})?|0\.(?=\d{0,5}[1-9])\d{1,6})\s*$ - type: number exclusiveMinimum: 0 maximum: 1000000000000 description: >- Aggregate hard charge ceiling in workspace credits. Decimal strings support up to six fractional digits; numeric values are rounded down to six digits. rails: type: array items: type: string enum: - api-key - mpp - x402 description: Legacy access-path field retained for compatible clients. externalUserId: type: string minLength: 1 pattern: \S description: Optional end-user billing attribution for a tenant secret key. attribution: type: object additionalProperties: true description: Optional JSON ledger metadata such as a task or customer identifier. required: - query additionalProperties: false LocusWebSearchResponse: type: object properties: object: const: locus.web_search capability: const: web.search routerVersion: const: 2026-09-14.v28 query: type: string mode: type: string enum: - fast - balanced - comprehensive partial: type: boolean providers: type: array items: type: object properties: providerId: type: string providerName: type: string estimatedCostUsd: oneOf: - type: number - type: 'null' status: type: string enum: - succeeded - failed - pending latencyMs: type: integer minimum: 0 resultCount: type: integer minimum: 0 imageCount: type: integer minimum: 0 chargedCredits: type: string pattern: ^\d+(?:\.\d+)?$ errorCode: type: string dispatchedQuery: type: string surfacedResultCount: type: integer minimum: 0 uniqueSurfacedResultCount: type: integer minimum: 0 marginalResultCount: type: integer minimum: 0 tailLatencyContributionMs: type: integer minimum: 0 required: - providerId - providerName - status - latencyMs - resultCount - imageCount - surfacedResultCount - uniqueSurfacedResultCount - marginalResultCount - tailLatencyContributionMs additionalProperties: false results: type: array items: type: object properties: title: type: string url: type: string format: uri snippet: type: string publishedAt: type: string engine: type: string score: type: number minimum: 0 maximum: 1 sources: type: array minItems: 1 items: type: object properties: providerId: type: string providerName: type: string rank: type: integer minimum: 1 required: - providerId - providerName - rank additionalProperties: false sourceCount: type: integer minimum: 1 required: - title - url - sources - sourceCount additionalProperties: false images: type: array items: type: object properties: url: type: string format: uri title: type: string sourceUrl: type: string format: uri sources: type: array minItems: 1 items: type: object properties: providerId: type: string providerName: type: string required: - providerId - providerName additionalProperties: false required: - url - sources additionalProperties: false resultCount: type: integer minimum: 0 imageCount: type: integer minimum: 0 billing: type: object properties: chargedCredits: type: string pattern: ^\d+(?:\.\d+)?$ successfulProviders: type: integer minimum: 0 attemptedProviders: type: integer minimum: 0 required: - chargedCredits - successfulProviders - attemptedProviders additionalProperties: false routingPolicy: type: object properties: requestedMode: type: string enum: - shadow - canary - enforce effectiveMode: type: string enum: - static - shadow - canary - enforce policyId: type: string predictedRouteId: type: string predictedDecision: type: string enum: - single - multi confidence: type: number minimum: 0 maximum: 1 accepted: type: boolean applied: type: boolean fallbackReason: type: string enum: - policy_unavailable - artifact_not_eligible - unsupported_request - low_confidence - shadow_only - canary_holdout - route_unavailable required: - requestedMode - effectiveMode - accepted - applied additionalProperties: false required: - object - capability - routerVersion - query - mode - partial - providers - results - images - resultCount - imageCount - billing additionalProperties: false responses: BadRequest: description: >- The request is malformed or fails local validation before any provider or payment action. securitySchemes: secretKey: type: http scheme: bearer description: Tenant secret key (lcr_…). Server-side only. endUserToken: type: http scheme: bearer description: >- 60-3600 second end-user JWT minted via /credits/end-users/{id}/token. If the JWT has sid, send the original session value in X-Locus-Session-Id; sid contains only its SHA-256 fingerprint. Bearer tokens are replayable until expiry; use short TTLs, optional session binding, and Idempotency-Key on operations. agentConnection: type: http scheme: bearer description: >- Scoped lcac_ credential. Tenant-managed Agent Connections authorize only their bound MCP and wrapped execution surfaces. A bootstrap connection for a self-registered agent additionally authorizes the explicit /credits/agent/* self-service routes for its own account; neither form authorizes general tenant management. ````