81trust / 100

Domaincheck Domain

by DomainCheck by AgentGate in Developer tools

x402 APIPassing, checked 2 h ago

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

GET
https://api.youraitools.co/domaincheck/v1/domain
Price
$0.002
per call in USDC
Uptime
100%
last 30 days
Response time
109 ms
279 ms slowest 5%
Last check
Passed
2 h ago, next any minute now

Run a free test callHow to call it

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to call it

GET https://api.youraitools.co/domaincheck/v1/domain

Each call costs $0.002 in USDC on Base, paid with the request over x402.

Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.

Example request

From the listing.

GET https://api.youraitools.co/domaincheck/v1/domain?domain=example.com

Parameters

ParameterTypeRequiredDescription
domainstringYesDomain name, URL or email address, e.g. "example.com" (IDN allowed)

Example response

The provider's example. We can't check it without paying.

Example response, 108 lines
{
  "dns": {
    "a": [
      "172.66.147.243",
      "104.20.23.154"
    ],
    "aaaa": [
      "2606:4700:10::6814:179a",
      "2606:4700:10::ac42:93f3"
    ],
    "caa": [],
    "cname": [],
    "dnssec_validated": true,
    "mx": [],
    "ns": [
      "hera.ns.cloudflare.com",
      "elliott.ns.cloudflare.com"
    ],
    "null_mx": true,
    "txt_count": 2
  },
  "dns_queries": 20,
  "domain": "example.com",
  "email": {
    "accepts_mail": false,
    "bimi": {
      "present": false
    },
    "dkim": {
      "note": "DKIM selectors cannot be enumerated; only common selectors are checked, so none found does not mean DKIM is absent.",
      "revoked_selectors": 10,
      "selectors_checked": 10,
      "selectors_found": []
    },
    "dmarc": {
      "adkim": "s",
      "aspf": "s",
      "inherited_from": null,
      "multiple": false,
      "pct": 100,
      "policy": "reject",
      "present": true,
      "record": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
      "rua": false,
      "ruf": false,
      "subdomain_policy": "reject"
    },
    "grade": "A",
    "mta_sts": {
      "present": false
    },
    "mx_provider": null,
    "spf": {
      "all": "-all",
      "dns_lookups_top_level": 0,
      "includes": [],
      "invalid_terms": [],
      "multiple": false,
      "policy": "fail",
      "present": true,
      "record": "v=spf1 -all",
      "redirect": null
    },
    "tls_rpt": {
      "present": false
    }
  },
  "engine": "domaincheck-2026.10.21",
  "exists": true,
  "flags": [
    {
      "description": "Null MX (RFC 7505): the domain explicitly accepts no email.",
      "id": "null_mx",
      "penalty": 10,
      "severity": "medium"
    }
  ],
  "input": "example.com",
  "ms": 180,
  "public_suffix": "com",
  "registrable_domain": "example.com",
  "registration": {
    "age_days": 11391,
    "available": true,
    "created": "1995-08-14T04:00:00Z",
    "dnssec_signed": true,
    "domain": "example.com",
    "expires": "2027-08-13T04:00:00Z",
    "expires_in_days": 295,
    "found": true,
    "nameservers": [
      "elliott.ns.cloudflare.com",
      "hera.ns.cloudflare.com"
    ],
    "registrar": "RESERVED-Internet Assigned Numbers Authority",
    "registrar_iana_id": "376",
    "server": "https://rdap.verisign.com/com/v1/",
    "source": "iana-bootstrap",
    "status": [
      "client delete prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ]
  },
  "score": 90,
  "tier": "full",
  "verdict": "low_risk"
}

Call it from code

The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.002.

curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i 'https://api.youraitools.co/domaincheck/v1/domain?domain=example.com'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - 'https://api.youraitools.co/domaincheck/v1/domain?domain=example.com' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode
JavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.002 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.002" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.002 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.youraitools.co%2Fdomaincheck%2Fv1%2Fdomain
const res = await pay("https://api.youraitools.co/domaincheck/v1/domain?domain=example.com");
console.log(res.status, await res.text());
Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.002 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.002"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.get("https://api.youraitools.co/domaincheck/v1/domain?domain=example.com")
    print(res.status_code, res.text)

Security scan

No findings

We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 h agoPassed402284 ms$0.002
10 h agoPassed40283 ms$0.002
17 h agoPassed402130 ms$0.002
25 h agoPassed40231 ms$0.002
33 h agoPassed40241 ms$0.002
Show 10 older checks
41 h agoPassed402103 ms$0.002
2 days agoPassed402113 ms$0.002
2 days agoPassed40284 ms$0.002
3 days agoPassed402111 ms$0.002
3 days agoPassed40272 ms$0.002
3 days agoPassed40280 ms$0.002
3 days agoPassed402100 ms$0.002
4 days agoPassed40233 ms$0.002
4 days agoPassed40266 ms$0.002
4 days agoPassed40243 ms$0.002