{"service":"domain-check","description":"Live technical checks of a domain, measured by us at request time: A/AAAA, NS, MX records, SPF and DMARC policies, DNSSEC presence (DS), CAA, TLS certificate issuer, validity dates and hostname match on port 443, and HTTPS security headers (HSTS, CSP, X-Frame-Options). Returns a simple risk flag list. Use when an agent must sanity-check a company's or vendor's domain before trusting an email, link or supplier: does it resolve, receive mail, publish SPF/DMARC, and serve a valid TLS certificate. Paid per call via x402 (USDC on Base).","use_when":"Use when an agent must sanity-check a company's or vendor's domain before trusting an email, link or supplier: does it resolve, receive mail, publish SPF/DMARC, and serve a valid TLS certificate.","price":"$0.003","network":"eip155:8453","endpoints":{"check":"/v1/domain/check?domain=example.com","health":"/health","mcp":"/mcp (tool domain_check)"},"sources":[{"id":"LIVE_DNS","name":"Live DNS lookups via Cloudflare DNS-over-HTTPS (1.1.1.1), DNSSEC-validating","enabled":true},{"id":"LIVE_TLS_HTTP","name":"Live TLS handshake and HTTPS HEAD request on port 443","enabled":true,"note":"only to public IP addresses"}],"attribution":["All results are live DNS, TLS and HTTP measurements made by this service; no third-party database is used."],"disclaimer":"Point-in-time technical measurement, not a reputation or ownership verdict. No registration (WHOIS/RDAP) data is included.","legal":{"privacy":"https://domain-check-production-6228.up.railway.app/privacy","terms":"https://domain-check-production-6228.up.railway.app/terms"}}