EU AI Act Transparency Lead Scanner

Scan submitted public URLs for observable AI-transparency signals in page HTML. The Actor fetches robots.txt first, then the submitted page, and returns deterministic Dataset rows with signal evidence, a transparency gap score, lead tier, and review flag. It does not crawl discovered links, call an LLM, or issue a legal or compliance verdict.

Contract

• Input is JSON with schemaVersion, requestId, urls, maxResults, freshnessMinutes, and detailLevel.
• urls contains 1-100 public HTTP(S) URLs. IP literals, credentials, fragments, and non-standard ports are rejected.
• The Actor checks robots rules, same-host redirects, public-address SSRF constraints, response limits, and timeouts.
• Useful observations are written to the default Dataset and summarized in the default Key-Value Store record OUTPUT.
• Errors, robots denials, source outages, invalid URLs, and budget failures are represented in the output envelope and do not become legal findings.

Input

{
  "schemaVersion": "1.0",
  "requestId": "demo-ai-001",
  "urls": ["https://www.w3.org"],
  "maxResults": 1,
  "freshnessMinutes": 60,
  "detailLevel": "compact"
}

Dataset row

{
  "requestId": "demo-ai-001",
  "actor": "eu-ai-act-transparency-lead-scanner",
  "dedupeKey": "f4eb4d0e69440fef0bd286b0caf1163b72dd9ea1400941188677961ac1ccef2e",
  "sourceUrl": "https://www.w3.org",
  "canonicalUrl": "https://www.w3.org/",
  "transparencyGapScore": 45,
  "leadTier": "medium",
  "isLead": true,
  "needsReview": true
}

The full Dataset row also contains the observed signal set, source metrics, timestamps, robots result, and evidence hashes. The compact OUTPUT record contains the bounded run envelope described by .actor/business_output_schema.json.

dedupeKey is a stable fingerprint of the canonical URL for your own deduplication — it does not by itself decide whether a repeat request is billed again; caching and re-billing on this Actor also depend on the run's detail level and scanner version.

API

Start a run with a bearer token and explicit JSON input:

curl -sS -X POST 'https://api.apify.com/v2/acts/zinin~eu-ai-act-transparency-lead-scanner/runs?waitForFinish=60' \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H 'Content-Type: application/json' \
  --data '{"schemaVersion":"1.0","requestId":"demo-ai-001","urls":["https://www.w3.org"],"maxResults":1,"freshnessMinutes":60,"detailLevel":"compact"}'

Read Dataset rows using the returned defaultDatasetId:

curl -sS "https://api.apify.com/v2/datasets/$DEFAULT_DATASET_ID/items?clean=true&format=json" \
  -H "Authorization: Bearer $APIFY_TOKEN"

Read the compact run envelope using the returned defaultKeyValueStoreId:

curl -sS "https://api.apify.com/v2/key-value-stores/$DEFAULT_KEY_VALUE_STORE_ID/records/OUTPUT" \
  -H "Authorization: Bearer $APIFY_TOKEN"

MCP

For an Apify MCP client exposing the standard call-actor tool, send this exact payload:

{
  "name": "call-actor",
  "arguments": {
    "actor": "zinin/eu-ai-act-transparency-lead-scanner",
    "input": {
      "schemaVersion": "1.0",
      "requestId": "demo-ai-001",
      "urls": ["https://www.w3.org"],
      "maxResults": 1,
      "freshnessMinutes": 60,
      "detailLevel": "compact"
    }
  }
}

Boundaries and pricing

This is a BYOD observation scanner. It does not discover prospects, decide whether the EU AI Act applies, assign a legal risk class, or provide legal advice. The Store pricing page is authoritative; only useful Dataset rows use the configured result-found event, while the platform may also charge the automatic run-start event.

Related tools

Related tools for adjacent workflows in compliance and public procurement, operational gap-lead generation.

Actor	What it does
EU Accessibility Privacy Lead Scanner	Pair it in the operational gap-lead generation workflow: BYOD compliance scanner for observed accessibility and privacy exposure signals on a submitted URL....
Clinic Reception Gap Lead Finder	Pair it in the operational gap-lead generation workflow: Analyze submitted clinic websites for reception-channel gaps with exact BYOD crawling and no discovery
Counterparty Risk Rollup — Sanctions, Courts, Registry, Hiring	Pair it in the compliance and public procurement workflow: One call, one row per counterparty: sanctions screening (OFAC + EU), legal-entity registry (GLEIF),...
Restaurant Booking Gap Lead Finder	Pair it in the operational gap-lead generation workflow: Analyze submitted restaurant websites for booking-channel gaps with exact BYOD crawling and no discovery
Company Registry Enricher	Pair it in the compliance and public procurement workflow: Turn a company name, LEI or UK company number into an official registry card: legal name, status,...

Machine use

The Actor is callable through the Apify API, SDK, and Apify MCP server. The input, Dataset row, and bounded OUTPUT envelope are the machine-facing contracts; observed signals are evidence, not a compliance conclusion.