815 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Email address check for AI agents (signups, outreach, fraud screening): RFC syntax, disposable / role / free-provider detection, MX and null-MX, SPF/DMARC of the domain, domain age via RDAP, parking, verdict (valid | ris...
DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, p...
AI-agent readiness audit, $0.001 USDC per call: How ready is a website for AI agents? Live checks of /llms.txt, robots.txt rules for 12 AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot…), sitemap.xml...
DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, p...
Paid DNS record lookup (A/AAAA/MX/NS/TXT/CNAME) via Cloudflare DoH
Paid DNS record lookup (A/AAAA/MX/NS/TXT/CNAME) via Cloudflare DoH
Paid DKIM (RFC 6376) selector lookup
Paid WHOIS / RDAP lookup via rdap.org
Paid SVCB/HTTPSSVC (RFC 9460+9461) deep parser (cycle 170, x402 $0.001) - probes 11 conventional _<port>._<proto>.<domain> SVCB endpoints (_443._tcp + _443._tcp.www + _443._tcp.api + _80._tcp + _25._tcp + _587._tcp + _85...
Paid RPKI Route Origin Validation (ROV) auditor per RFC 6811 (cycle 172, x402 $0.001) - accepts ?prefix=<CIDR> [auto-resolves announcing ASN via RIPEstat prefix-overview] OR ?prefix=<CIDR>&asn=ASxxxx OR ?asn=ASxxxx; call...
Paid DNS nameserver vendor fingerprint (cycle 116) — queries NS records via Cloudflare DoH, classifies each NS hostname against a 28-provider heuristic table (Cloudflare/AWS-Route53/Google-Cloud-DNS/NS1/Azure/Akamai-Edge...
DNS vs HTTP consistency: resolves the domain's A/AAAA records, fetches the site over HTTPS, and reports whether the served response looks consistent (status, final host, whether the response is fronted by a CDN like Clou...
Paid DNS record lookup (A/AAAA/MX/NS/TXT/CNAME) via Cloudflare DoH
composed domain threat report from DNS infrastructure signals and high-abuse TLD heuristics for agent browsing decisions.
DNS CAA record lookup: which certificate authorities are allowed to issue TLS certificates for a domain (issue, issuewild, iodef), parsed. Certificate policy audits and issuance troubleshooting. $0.01 per lookup.
DNS propagation check: resolves a domain's A and MX records through three independent public resolvers (Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9) and reports whether all agree. Verify a DNS change has propagated after a...
Paid subdomain takeover fingerprint (cycle 192, x402 $0.001) - GET ?host= OR ?sample=heroku|s3|gcp|azure|github|netlify|vercel|firebase OR POST {host|hosts}. Per host: DNS A/AAAA+CNAME via DoH then HTTP+HTTPS probe of al...
Paid x402 endpoint-durability auditor (cycle 196, x402 $0.001) - GET ?url=<SELLER_URL> scores whether a seller's public URL is STABLE enough to trust with real money: URL-shape provider fingerprint (trycloudflare/lhr.lif...
Paid x402 cart cost-quote (cycle 185, x402 $0.001) - GET with no params returns the FULL live price list of every paid route grouped into price tiers plus api_base + payTo + network + asset, so an agent can plan a workfl...
Paid deep SPF record parser + DNS-lookup budget auditor (cycle 160 restored 2026-10-17, x402 $0.001) - parses v=spf1 into its directive list, classifies each mechanism per RFC 7208 SS5 (pass/fail/softfail/neutral/literal...
Paid DNS label & zone-naming standards-compliance audit (cycle 159, x402 $0.001) - audits every label of the zone against RFC 1035 §2.3.4 + RFC 5891 §4.2.3 + RFC 2782 SRV conventions: (1) per-label length <= 63 octets; (...
Paid DKIM key-rotation freshness audit (cycle 157, x402 $0.001) - probes 25 common DKIM selectors in parallel via DoH, parses per-selector v/k/p/h/s/t/n tags, computes SHA-256 fingerprint of each public key, and scores r...
Paid DNS CAA (Certification Authority Authorization) policy audit (cycle 156, x402 $0.001) - parses a domain's CAA records per RFC 8659, classifies each authorized CA token against a 32-CA registry (Let's Encrypt/DigiCer...
Paid DNS AXFR (zone-transfer) vulnerability probe (cycle 148, x402 $0.001) — discovers authoritative NS via Cloudflare DoH, then opens raw TCP/53 to each NS and sends an RFC 1035 wire-format AXFR query (QTYPE=252) per RF...