815 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid DoH trust-anchor cross-resolver agreement probe (cycle 142, x402 $0.001) - sends the same DNS query (A/AAAA/DS/DNSKEY/MX/TXT/CNAME) to 3 public DoH resolvers: Cloudflare (RFC 8484 wire-format) + Google (JSON API /re...
Paid IP geolocation via dual-source consensus (cycle 133, x402 $0.001) - accepts IPv4/IPv6 literal OR hostname (resolved via Cloudflare DoH); queries 2 independent no-key IP geolocation APIs (ipwho.is + ipinfo.io); retur...
Paid HTTPS RR (RFC 9460 SVCB/HTTPS) resolver (cycle 132, x402 $0.001) - queries apex HTTPS record via Cloudflare DoH, parses SVCB wireformat per RFC 9460 §2.2 (SvcPriority + SvcParams), decodes 7 known SvcParamKeys (mand...
Paid CT-log certificate pre-fingerprint (cycle 124, x402 $0.001) - queries crt.sh for the target domain, parses every returned certificate record, and aggregates total_certs_observed + unique_sha256_count + duplicate_cer...
Paid deep DMARC policy forensic analyzer (cycle 110) — fetches _dmarc.<domain> TXT via Cloudflare DoH and parses ALL DMARC tags (p, sp, pct, rua, ruf, adkim, aspf, rf, ri, fo) per RFC 7489. Returns policy_strength (none/...
Paid active TLS 1.3 + PQC + ECH probe (cycle 108) — opens TLS 1.3 connection, advertises 13 named groups including PQC hybrids (X25519Kyber768Draft00/Draft01, X25519Kyber768, SecP256r1Kyber768Draft00/Draft01, P256Kyber76...
Paid brand-impersonation risk synthesis (cycle 106) — aggregates 8 signals (domain age via crt.sh, BIMI RFC 8848 record, RFC 9116 security.txt, llms.txt presence, /.well-known/x402 honest declaration, https→http redirect...
Paid llms.txt provenance / author fingerprint (cycle 102) — extracts H1 + byline + contact emails + @-handles from llms.txt body, cross-references the same email against /.well-known/security.txt Contact: field (RFC 9116...
Paid RFC 8460 SMTP TLS-RPT (TLS Reporting) report parser (cycle 178, x402 $0.001) - accepts POST application/json {'report':<RFC 8460 JSON object>} OR POST application/json {'report_text':<JSON string>} OR GET ?report=<u...
Paid DNS CNAME chain tracer (cycle 175, x402 $0.001) - accepts ?host=<HOST> OR ?domain=<HOST> OR ?url=<URL>; actively follows CNAME + A/AAAA hops via Cloudflare DoH for the target host (up to 12 hops with loop detection)...
Paid MTA-STS (RFC 8461) policy+record cross-validator (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN>; actively probes _mta-sts.<domain> TXT (RFC 8461 SS3.1) via DoH + https://mta-sts.<domain>/.well-known/mta-sts.txt...
Paid DNS SRV (RFC 2782) record mapper + service-discovery auditor (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN> + ?service=<SVC> + ?proto=<tcp|udp|tls> OR shorthand ?q=<SVC>.<PROTO>.<DOMAIN>; actively probes Cloudf...
Paid bulk-sender email-deliverability verdict (cycle 100) — composes MX + SPF + DKIM + DMARC + MTA-STS + TLS-RPT + provider fingerprint into a single 0-100 deliverability score with A-F grade and findings[]. Different fr...
Paid deep HTTP header policy audit — 30+ headers across 12 groups: CSP (Content-Security-Policy + Report-Only) + HSTS (max-age + includeSubDomains) + COOP/COEP/CORP/Origin-Agent-Cluster + Permissions-Policy (feature list...
Paid comprehensive DNS audit — parallel A/AAAA/MX/NS/TXT/CAA/SOA/DS queries via Cloudflare DoH, email-auth rollup (SPF/DKIM/DMARC + bulk-sender Gmail/Yahoo compliance), nameserver diversity, CAA policies, DNSSEC DS hint,...
Paid network-timing breakdown for a URL — DNS resolve + TCP connect + TLS handshake + TTFB (time to first byte) + total download phase-by-phase milliseconds + CDN/edge-region detection from CF-Ray/X-Amz-Cf-Pop/X-Vercel-I...
Base or Ethereum contract address -> ABI and function list: Sourcify verification (exact/partial match), contract name, compiler, ABI, function selectors + signatures, event topics; proxies (EIP-1967, ZeppelinOS, others...
DMARC check for a domain: finds the TXT record, policy mode and aggregate-reporting signal for email trust decisions.
DNS-over-HTTPS lookup for common record types, normalized into a risk report for web and email agents.
domain risk report from DNS signals: address records, nameservers, MX records and high-abuse TLD heuristics.
email deliverability and spoofing check from DNS: MX, SPF and DMARC records with concise risk flags.
Instant 30-Day Prepaid API Key Pass (ak_live_...) for AI agents, LangChain, n8n, Make.com, and developers. Unlocks all 23 paid per-call Agent Kiosk REST & MCP intelligence tools for 30 days via X-API-KEY header without p...
Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once,...