LeonAI Links
Short links. Serious analytics.
Edge-network redirects, PII-free analytics, custom domains and a full API — and every link is scanned against Google Safe Browsing.
Everything your organization runs
Link safety
Every link is scanned against Google Safe Browsing on creation, update and import — then rescanned every ten minutes. A destination that turned malicious after the link was already distributed leads to automatic suspension, and whoever clicks lands on a warning page instead of the site.
Edge-network redirects
The redirect itself runs on Cloudflare's edge network, and is built for sub-50ms redirects.
Your own domain
Connect a custom domain and verify ownership of it with a real DNS TXT record — verification against the DNS itself, not a declaration in a form.
Analytics without PII
Five breakdowns — device, browser, operating system, country and referrer — alongside unique visitors, bot detection and conversion tracking. Analytics pages can be shared externally: they carry no identifying information.
QR and link-in-bio
A QR code for every link in PNG or SVG, with colors and an error-correction level, and a logo in the SVG version. Alongside them, a link-in-bio page that gathers all your links in one place.
API and SDK
A public API documented in OpenAPI 3.1 with eight scopes. Keys are stored as a hash and shown only once, there are SDKs for TypeScript and Python, and the documentation lives at developers.leonai.io.
Webhooks and smart routing
Ten webhook event types, every call signed with HMAC. On Business and up, rule-based routing and A/B tests between destinations open up as well.
Teams, import and data control
Team collaboration, importing your existing links from Bitly, and exporting or deleting the data per GDPR.
The developer environment
We also built a Make app with eight modules, a Zapier app, an MCP server and a browser extension.
What each plan includes
Every plan is defined by the links you create per month and the clicks you track — from 100 links and 5,000 clicks on Free to unlimited on Enterprise. QR codes and the UTM builder are included from the free plan up; analytics history is kept for 30 days on Free, one year on Pro and three years on Business.
Where Links sits in your development environment
The Make app and the Zapier app send to and receive from Links; the MCP server and the browser extension access it directly.
Pricing that is simple and clear
Prices in US dollars per month, as published on links.leonai.io. Annual billing saves 20%.
Built to pass security reviews
The questions your IT and compliance teams will ask — answered up front.
- Every link is scanned against Google Safe Browsing on creation, update and import, and rescanned every ten minutes — with automatic suspension and a warning page for the visitor.
- Strict CSP and HSTS policies.
- TOTP two-factor authentication and organizational sign-in with Google or Microsoft.
- Email address verification before a link can be created.
- API keys are stored as a hash and shown only once, with eight scopes to limit permission.
- GDPR and CCPA/CPRA compliant out of the box — consent, export, and deletion built in.
ISO/IEC 27001
ISO 27001 certified — the certification covers the whole company, not a single product.
HOSTED ON CLOUDFLARE · GLOBAL EDGE
Runs on Cloudflare's edge network.
Questions that keep coming up
What happens if a link I already distributed turns malicious?
The Google Safe Browsing scan does not stop at creation — it repeats every ten minutes. If the destination is flagged, the link is suspended automatically and whoever clicks it lands on a warning page instead of reaching the site.
Can we use our own domain?
You connect the domain in the system and verify ownership of it with a DNS TXT record. Verification is done against the DNS itself and not by a declaration in a form, so nobody else can register a domain that is not theirs.
What limits each plan?
The links you create per month and the clicks you track, per plan. QR codes, the UTM builder and the analytics themselves are included on every plan; what changes between plans is the quotas, the number of custom domains and how long the history is kept.
Is there an API? And what about automation tools?
There is a public API documented in OpenAPI 3.1 with eight scopes, SDKs for TypeScript and Python, and documentation at developers.leonai.io. We also built a Make app, a Zapier app, an MCP server and a browser extension.
Smart moves — it’s in our nature