# agent402.tools Brand Protection Workflow

> agent402.tools Brand Protection Workflow is a paid API for AI agents from agent402.tools, paid per call via x402, $0.027/call, status unknown (last checked 2026-09-14).

Runs a bundled domain legitimacy check combining WHOIS age, DNS resolution, scam/phishing search results, and HTTP headers in a single paid call

## Facts

- Endpoint: POST https://agent402.tools/api/skill/brand-protection
- Price: $0.027/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-tools-brand-protection-workflow-1a0e9ff0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_g8MYDog2EKekRtuVb0z4s

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-tools-brand-protection-workflow-1a0e9ff0 -d '<json body>'
```

Example prompt: Can you check if trusty-payments-checkout.com is a legitimate domain — run WHOIS, DNS, scam checks, and HTTP headers on it so I can tell if it's a phishing site?

## When to prefer this

Use this endpoint when you need a quick multi-signal trust assessment on an unfamiliar domain and want to avoid making 4 separate API calls. It bundles WHOIS age, DNS lookup, phishing/scam search, and HTTP header analysis into one x402-paid call, making it ideal for fraud screening, brand protection workflows, or vetting third-party domains before integration.

## Known failure modes

- Domain does not exist or fails DNS resolution — partial results returned
- WHOIS data unavailable for certain TLDs
- Rate limiting or timeout on underlying sub-tools
- Invalid domain format returns validation error
- Scam search results may be incomplete for very new domains

## How this service works

Bundled execution of the Brand protection workflow - Is this domain legitimate? WHOIS age, DNS resolution, scam/phishing search results, and HTTP headers for a quick trust assessment. One x402 payment runs 4 underlying tools (whois, dns-lookup, search, http-headers); partial-success per step.

## Output

Returns a consolidated trust assessment covering: WHOIS domain age, DNS resolution results, scam/phishing mentions from search results, and HTTP response headers — giving a quick multi-signal verdict on whether the domain appears legitimate or suspicious.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain to investigate (e.g. stripe.com)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "args": {
   "domain": "stripe.com"
  },
  "pack": "brand-protection",
  "steps": [
   {
    "ok": true,
    "slug": "whois",
    "result": {}
   },
   {
    "ok": true,
    "slug": "dns-lookup",
    "result": {}
   },
   {
    "ok": true,
    "slug": "search",
    "result": {}
   },
   {
    "ok": true,
    "slug": "http-headers",
    "result": {}
   }
  ],
  "summary": "4/4 steps succeeded"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-tools-brand-protection-workflow-1a0e9ff0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)