The app provides a free, private PR readiness assessment for founders. Users can create an account, run a quick assessment, and receive a banded score plus an indicative PR timeline.

1. Sign up: /auth/signup
2. Run the free assessment: /assessment/free
3. Review results: score, band (Low/Medium/High), and timeline estimate.

Configure these in your host (e.g., DigitalOcean App → Settings → Environment):

1. Register at resend.com and verify your domain DNS (SPF + DKIM).
2. Create or reset SMTP_PASS in Resend → Settings → SMTP.
3. Set SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS, SMTP_FROM in your app host.
4. Smoke test the mailer (locally):

curl -v -X POST http://localhost:3000/api/debug/email \
  -H "Content-Type: application/json" \
  -H "x-internal-token: $EMAIL_DEBUG_TOKEN" \
  -d '{"to":"[email protected]"}'

You should see 200 OK and an accepted recipient list. If you get 535 Authentication failed, recheck credentials and that your SMTP_FROM domain is verified.

POST /api/signup

Create a user; sends a non-blocking welcome email.

POST https://startupstoryscale.com/api/signup
Content-Type: application/json

{
  "email": "[email protected]",
  "password": "StrongPass123!",
  "name": "Ada Founder",
  "website": "example.com"
}

Responses

• 201 → { ok: true }
• 409 user exists or team exists for website host
• 400/500 validation or internal error

POST /api/assessments/free

Computes score/band and stores a record; cooldown by identity.

POST https://startupstoryscale.com/api/assessments/free
Content-Type: application/json

{
  "answers": {
    "startupName": "Acme AI",
    "website": "https://acme.ai",
    "passportCountry": "CA",
    "losOrgName": "Creative Destruction Lab",
    "foundersCount": 2,
    "trl": 7,
    "fundingSource": "ANGEL",
    "ceoClb": 7,
    "teamChangeAfterLos": "NO_CHANGE"
  }
}

Response (example)

{
  "score": 50,
  "band": "Medium",
  "monthsEstimate": 16,
  "successProb": 0.5,
  "successProbPct": 50,
  "drivers": { "positive": ["High TRL speeds processing","Angel-backed"], "risk": [] }
}

POST /api/debug/email

Internal-only debug endpoint (requires header token).

curl -X POST https://startupstoryscale.com/api/debug/email \
  -H "Content-Type: application/json" \
  -H "x-internal-token: $EMAIL_DEBUG_TOKEN" \
  -d '{"to":"[email protected]"}'

Health endpoints help you verify connectivity and dependencies. The public site does not expose /api/healthz (404 via CDN), but it’s available locally and can be mounted behind auth/status in production.

curl -s http://localhost:3000/api/healthz | jq

• Debug email endpoint requires x-internal-token.
• Emails are sent only from verified domains (SMTP_FROM).
• Assessment cooldown prevents repeated submissions from the same identity within a window.
• RBAC and audit log land in the next phases (see Roadmap).

• Team management and invites (multi-founder workspaces).
• RBAC and audit log for sensitive changes.
• Detailed report v2 with prioritized risks and actions.
• Designated org integrations + advanced analytics.

Track progress on the Roadmap.

Questions or feedback? Reach us at [email protected].

Privacy-first. Aggregate analytics only. Not legal advice.