# Mighty

> Citadel is Mighty's product that checks customer files for generated or AI-edited fakes. Financial services first, starting with mortgage. Then insurance, jewelry to property claims.

## What Citadel is

Citadel is the product. Mighty is the company.

One scan returns allow, review, or block, with the evidence attached.

## Who it is for

Fraud and underwriting teams in financial services, starting with mortgage. Insurance teams use the same check.

## Where it sits

It sits in front of underwriting and claims, beside the systems those teams already run. Origination, underwriting, and claims systems stay in place.

## What it is not

- Not an OCR or document-reading vendor
- Not a VOI, VOE, or VOA source check
- Not a full fraud-investigation platform
- Not a public price list or self-serve checkout

When docs mention OCR, they mean Citadel can inspect text that an OCR tool already produced. Citadel is not an OCR vendor.

## How to start

Starting October 1, 2026, Mighty will not offer direct purchase of the hosted SaaS plan. New commercial terms will be enterprise or custom, scoped on a call.

Book a working session on your files: https://cal.com/tsung/demo
Contact: https://trymighty.ai/contact
Security and data handling: https://trymighty.ai/security
Status: https://status.trymighty.ai

## Product Pages

- [Mighty Home](https://trymighty.ai/): Citadel is Mighty's product that checks customer files for generated or AI-edited fakes. Financial services first, starting with mortgage. Then insurance, jewelry to property claims. One scan returns allow, review, or block, with the evidence attached.
- [Product](https://trymighty.ai/product): One scan of the file or photo. Allow, review, or block, plus the evidence your workflow keeps.
- [Use Cases](https://trymighty.ai/use-cases): Mortgage first. Then insurance, jewelry appraisals to property photos.
- [Lending](https://trymighty.ai/lending): Catch altered paystubs, W-2s, bank statements, and tax returns before you fund a loan.
- [Insurance](https://trymighty.ai/insurance): Jewelry appraisals to property photos. They issue the policy, or pay the claim, on that file. Citadel checks it first.
- [Claims](https://trymighty.ai/claims): Screen damage photos, repair estimates, and invoices at first notice of loss, before a claim pays.
- [Why Mighty](https://trymighty.ai/why-mighty): Manual review misses digital forgery. Citadel turns that check into a signal your systems can act on.
- [Contact](https://trymighty.ai/contact): Book a working session on your files. Citadel checks customer files for generated or AI-edited fakes. Commercial terms are scoped with you.
- [Security](https://trymighty.ai/security): How Citadel handles your data, retention, and responsible disclosure for financial services and insurance workflows. No training on your data.

# Citadel Docs

Use these docs to add Citadel to a lending or claims workflow. The core API is `POST /v1/scan`.

## Start Here

- [Docs Home](https://trymighty.ai/docs)
- [Quickstart](https://trymighty.ai/docs/quickstart)
- [Mighty Platform](https://trymighty.ai/docs/platform)
- [Use Cases](https://trymighty.ai/docs/use-cases)
- [FAQ](https://trymighty.ai/docs/faq)
- [How Citadel Works](https://trymighty.ai/docs/concepts/how-mighty-works)
- [Modalities And Attacks](https://trymighty.ai/docs/concepts/modalities-attacks)
- [Modes And Tolerance](https://trymighty.ai/docs/concepts/modes-tolerance)
- [Choose Scan Settings](https://trymighty.ai/docs/concepts/configs)
- [Glossary](https://trymighty.ai/docs/concepts/glossary)
- [Drift](https://trymighty.ai/docs/concepts/drift)
- [Integration Guides](https://trymighty.ai/docs/integrate)
- [Multimodal Support](https://trymighty.ai/docs/integrate/multimodal-support)
- [Framework Integration Map](https://trymighty.ai/docs/frameworks)
- [Sessions And Scan Groups](https://trymighty.ai/docs/concepts/sessions)
- [Billing, SCU, And Limits](https://trymighty.ai/docs/concepts/billing-scu)
- [OpenAPI](https://trymighty.ai/openapi/mighty-api.yaml)
- [Full Markdown](https://trymighty.ai/llms-full.txt)

## Pages

- [Citadel Docs](https://trymighty.ai/docs): Add Citadel before a lending or claims workflow funds, binds, or pays.
- [5-Minute Quickstart](https://trymighty.ai/docs/quickstart): Run your first Citadel scan in curl, TypeScript, Python, or Go. See what ALLOW, WARN, and BLOCK actually look like.
- [Mighty Platform](https://trymighty.ai/docs/platform): Understand API keys, permissions, content logging modes, billing status, and safe key handling in the Mighty dashboard.
- [Use Cases](https://trymighty.ai/docs/use-cases): Where Citadel sits before a mortgage funds, or an insurer binds or pays.
- [FAQ](https://trymighty.ai/docs/faq): What Citadel checks, what it does not claim, and where it sits before you fund, bind, or pay.
- [How Citadel Works](https://trymighty.ai/docs/concepts/how-mighty-works): The scan pipeline, what Citadel inspects, what it returns, and where your app routes the result.
- [Modalities And Attacks](https://trymighty.ai/docs/concepts/modalities-attacks): Understand what Citadel checks across text, images, documents, OCR output, model output, and closed beta audio.
- [Modes And Tolerance](https://trymighty.ai/docs/concepts/modes-tolerance): Choose fast, secure, or comprehensive mode, then set tolerance with profile, data sensitivity, and routing policy.
- [Choose Scan Settings](https://trymighty.ai/docs/concepts/configs): Pick content type, phase, mode, focus, profile, and data sensitivity from real product examples.
- [Glossary](https://trymighty.ai/docs/concepts/glossary): Plain-language definitions for Citadel scan, image evidence, billing, and prompt-safety terms.
- [Sessions And Scan Groups](https://trymighty.ai/docs/concepts/sessions): Use session IDs, scan groups, and request IDs to connect multistep scans across chats, files, OCR, output, and review.
- [Drift](https://trymighty.ai/docs/concepts/drift): Handle changes in inputs, models, policies, evidence chains, and attacker behavior over time.
- [Billing, SCU, And Limits](https://trymighty.ai/docs/concepts/billing-scu): Understand Security Compute Units, modality billing, included allowance, overage, tier caps, and file limits.
- [Integration Guides](https://trymighty.ai/docs/integrate): Choose the Citadel integration guide for text, OCR, uploads, images, model output, async scans, and errors.
- [Multimodal Support](https://trymighty.ai/docs/integrate/multimodal-support): Choose the right Citadel settings for text, images, PDFs, documents, OCR output, model output, and PII-heavy workflows.
- [Scan Text And OCR Output](https://trymighty.ai/docs/integrate/text-ocr): Use Citadel on plain text, extracted text, OCR output, and IDP fields before downstream automation trusts them.
- [Scan File Uploads](https://trymighty.ai/docs/integrate/file-uploads): Scan uploaded PDFs, images, and documents before storage, OCR, AI extraction, or workflow routing.
- [Damage Photo AI Fraud Review](https://trymighty.ai/docs/integrate/images-ai-fraud): Scan images for risk and authenticity signals before claims, repair, insurance, or review workflows trust them.
- [Scan Model Output](https://trymighty.ai/docs/integrate/model-output): Check generated model output before users, workflows, or agents act on it.
- [Async Deep Scans](https://trymighty.ai/docs/integrate/async-webhooks): Use async scans, polling, and webhooks for deep image and PDF review.
- [Error Handling](https://trymighty.ai/docs/integrate/errors): Handle common Citadel errors, billing states, limits, rate limits, and async states.
- [Framework Integration Map](https://trymighty.ai/docs/frameworks): Choose the right Citadel pattern for chat, uploads, backend APIs, serverless routes, and agent frameworks.
- [Vercel AI SDK Chat Guardrail](https://trymighty.ai/docs/frameworks/vercel-ai-sdk): Wrap Citadel as a wrapLanguageModel middleware for AI SDK 5+. One wrap, every model call screened — input + output, streaming + buffered, with optional AI Gateway routing.
- [Next.js Upload Guardrail](https://trymighty.ai/docs/frameworks/next-file-upload): Scan browser uploads in a Next.js Route Handler before storage, OCR, extraction, or review.
- [Backend API Helpers](https://trymighty.ai/docs/frameworks/node-python): Use these server-side helper patterns when your backend is Node, Python, Express, FastAPI, Flask, Django, or a custom API.
- [Workflow Playbooks](https://trymighty.ai/docs/workflows): Pick the workflow, then copy the Citadel scan plan.
- [POST /v1/scan](https://trymighty.ai/docs/api-reference/v1-scan): Request fields, response fields, errors, polling, and OpenAPI download for the public scan API.
- [Use With AI](https://trymighty.ai/docs/ai): Copy prompts, Markdown exports, llms.txt, and integration instructions for AI coding agents.
- [Document Processing Pipeline](https://trymighty.ai/docs/frameworks/document-pipeline): Scan a claim packet at upload, OCR, and model output. One scan_group_id links the chain. Forged-invoice walkthrough included.
- [LangChain + LangGraph Guardrail](https://trymighty.ai/docs/frameworks/langchain-langgraph): Drop Citadel in as an AgentMiddleware on create_agent for the modern path, or as a guardrail node in raw LangGraph for the advanced path. RAG poisoning, tool-output scanning, and PII redaction in one stack.

## Guidance For AI Coding Agents

When implementing Citadel, read the relevant guide first, then use the request examples and routing logic exactly. Store the API key in `MIGHTY_API_KEY`. Do not expose it to the browser.