# agosint: Domain Due Diligence (DNS, TLS, RDAP)

> agosint: Domain Due Diligence (DNS, TLS, RDAP) is a paid API for AI agents from agosint.shveik.dev, paid per call via x402, $0.015/call, status unknown (last checked 2026-10-14).

Performs comprehensive domain intelligence lookups including DNS records, TLS certificate details, RDAP/WHOIS registration data, hosting signals, and mail security for a given domain.

## Facts

- Endpoint: POST https://agosint.shveik.dev/v1/x402/domain?utm_source=zero.xyz
- Price: $0.015/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agosint-domain-due-diligence-dns-tls-rdap-3de421d2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Ua5ChEYAmI5_v2kXKH4My

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agosint-domain-due-diligence-dns-tls-rdap-3de421d2 -d '<json body>'
```

Example prompt: Can you pull the full domain intelligence report for stripe.com — I want to see its registration age, DNS records, TLS details, hosting info, and mail security signals before we onboard them as a vendor?

## When to prefer this

Use this endpoint when you need structured, signed domain intelligence covering DNS, TLS, RDAP registration, domain age, hosting, and mail security in a single call — especially for vendor due diligence, KYB workflows, or phishing risk assessment. Prefer over generic WHOIS tools when you need machine-readable, agent-ready output with a payment receipt. Choose the sibling 'domain intelligence and phishing-risk signals' endpoint if you need a more phishing-focused signal set rather than general registration and infrastructure data.

## Known failure modes

- Domain not found in RDAP/WHOIS — returns empty or partial records
- Invalid domain format (exceeds 253 chars or malformed) — validation error
- RDAP registry unavailable for TLD — partial data returned
- TLS lookup failure if domain has no HTTPS — TLS field may be empty
- Payment not settled — 402 response blocking the call

## How this service works

Company and domain due diligence for AI agents: official registers, sanctions lists and domain records, signed. Pay per call in stablecoins, no account.

## Output

Returns a JSON object containing: DNS records, TLS certificate information, RDAP/WHOIS registration data, domain age in days, hosting provider signals, mail security records (SPF/DKIM/DMARC), entity hint, source URL, schema identifier, and a signed receipt confirming the lookup.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {},
  "tls": {},
  "note": "Public r…",
  "rdap": {},
  "domain": "cez.cz",
  "schema": "agosint.…",
  "source": "RDAP via…",
  "hosting": {},
  "receipt": {},
  "signals": [],
  "age_days": 11113,
  "source_url": "https://…",
  "entity_hint": {},
  "retrieved_at": "2026-10-…",
  "mail_security": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agosint-domain-due-diligence-dns-tls-rdap-3de421d2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agosint.shveik.dev](https://www.zero.xyz/host/agosint.shveik.dev/llms.txt)