# AgentAegis Vet Endpoint

> AgentAegis Vet Endpoint is a paid API for AI agents from agentaegis-mcp-production.up.railway.app, paid per call via x402, $3/call, status unknown (last checked 2026-09-15).

Runs a composite safety check on a target endpoint URL — TLS/cert, DNS hygiene, threat intelligence, and domain-age signals — returning a PROCEED/CAUTION/BLOCK verdict with a trust score and reasons.

## Facts

- Endpoint: POST https://agentaegis-mcp-production.up.railway.app/x402/vet-endpoint
- Price: $3/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentaegis-vet-endpoint-728410a7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-_Oj162HCKzyFxde1L6ZS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentaegis-vet-endpoint-728410a7 -d '<json body>'
```

Example prompt: Before we call stripe.com/v1/charges and send payment, can you run a full safety vet on that endpoint — check the TLS cert, DNS hygiene, threat intel, and domain age — and tell me if we should PROCEED, use CAUTION, or BLOCK it?

## When to prefer this

Use this endpoint when an AI agent is about to call an unknown or third-party API — especially before executing a payment or passing sensitive data — and needs a fast composite safety verdict rather than running individual TLS, DNS, or threat-intel checks separately. Prefer this over raw threat-intel lookups when you want a single actionable PROCEED/CAUTION/BLOCK decision with multiple signal sources combined.

## Known failure modes

- Unresolvable domain returns DNS failure reason and likely BLOCK verdict
- Unreachable endpoint may cause timeout with partial signal data
- Invalid or malformed URL input returns a 400-class error
- Threat intel feed unavailability may degrade scoring accuracy
- Very new domains may trigger CAUTION due to insufficient history rather than confirmed malice

## How this service works

AgentAegis vet_endpoint — composite PROCEED/CAUTION/BLOCK safety verdict for an endpoint an AI agent is about to call or pay. Runs live TLS/cert, DNS hygiene, threat-intel (domain + resolved IP), and domain-age signals → one trust score with reasons.

## Output

Returns a JSON object with a 'verdict' field (PROCEED, CAUTION, or BLOCK), a numeric 'trust_score' (0-100), and a 'reasons' array listing the specific signals that informed the verdict — such as 'valid TLS', 'clean threat intel', 'young domain', or 'IP flagged in threat feed'.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentaegis-vet-endpoint-728410a7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentaegis-mcp-production.up.railway.app](https://www.zero.xyz/host/agentaegis-mcp-production.up.railway.app/llms.txt)