# 402 Guard — Domain Audit

> 402 Guard — Domain Audit is a paid API for AI agents from x402.momentbolt.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-12).

Audits a domain's live DNS and email-security posture (SPF, DMARC, DNSSEC, MX) and returns a graded security score, paid via tiny USDC microtransaction on Base.

## Facts

- Endpoint: POST https://x402.momentbolt.com/api/domain-audit?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/402-guard-domain-audit-92ecc49c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_IKSSzCAyjv1CtjRjmgG-F

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability 402-guard-domain-audit-92ecc49c -d '<json body>'
```

Example prompt: Can you run a full DNS and email-security audit on stripe.com — I want to see the SPF, DMARC, and DNSSEC posture and get an overall security grade?

## When to prefer this

Choose this endpoint when you need a live, graded audit of a specific domain's DNS and email-security posture including SPF, DMARC, DNSSEC, and MX acceptance — especially in agentic workflows that already handle x402 micropayments on Base. It is ideal for pre-send email infrastructure checks, vendor due diligence, or suspicious domain triage where a structured grade and detailed findings list are required.

## Known failure modes

- Invalid or malformed domain name returns an error
- Domain does not resolve — flagged in posture with resolves: false
- Network timeout if live DNS lookup is slow
- Missing SPF or DMARC records reflected in posture fields and lower score
- Payment failure if insufficient USDC balance on Base

## How this service works

Lint x402 payment requirements or audit live DNS and email-security posture with tiny USDC payments on Base.

## Output

Returns a JSON object with an overall letter grade (e.g. 'A'), numeric score (0–100), the queried domain, full posture details (SPF record, DMARC record, whether the domain resolves, whether it accepts email, DNSSEC authentication status), and a list of findings each with a code, human-readable message, and severity level.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "ASCII or punycode domain name without a URL path"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "grade": "A",
  "score": 96,
  "domain": "example.com",
  "posture": {
   "spf": "v=spf1 -all",
   "dmarc": "v=DMARC1; p=reject;",
   "resolves": true,
   "acceptsEmail": false,
   "dnssecAuthenticated": true
  },
  "findings": [
   {
    "code": "NULL_MX",
    "message": "The domain explicitly declares that it does not accept email.",
    "severity": "info"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/402-guard-domain-audit-92ecc49c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.momentbolt.com](https://www.zero.xyz/host/x402.momentbolt.com/llms.txt)