# August Domain Audit

> August Domain Audit is a paid API for AI agents from api-v3qhpbwutp.august.services, paid per call via x402, $0.05/call, status down (last checked 2026-09-15).

Performs a deterministic public-posture audit of a domain, returning DNS records, SPF, TLS certificate details, and presence of robots.txt and security.txt in a single call.

## Facts

- Endpoint: POST https://api-v3qhpbwutp.august.services/v1/domain-audit
- Price: $0.05/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/august-domain-audit-7f8f0076
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_d4hsI0BA1BZOdWf3Gc1MT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability august-domain-audit-7f8f0076 -d '<json body>'
```

Example prompt: Can you do a full public security audit of example.com — I want to see the DNS records (A, MX, NS, TXT), whether SPF is set up, TLS certificate issuer and how many days until it expires, and whether robots.txt and security.txt are published?

## When to prefer this

Choose this endpoint when you need a consolidated, deterministic snapshot of a domain's public security posture without AI inference — specifically when you want DNS records, SPF, TLS certificate metadata, and policy file presence all in one call instead of making a dozen separate lookups. Prefer it over manual DNS tools or separate TLS checkers when building automated domain health checks, onboarding workflows, or compliance audits.

## Known failure modes

- Domain does not exist — DNS resolution fails, returns error or empty records
- Domain is private or behind a firewall — TLS handshake not reachable
- Malformed domain input — validation error returned
- TLS certificate is expired or self-signed — authorized field returns false
- robots.txt or security.txt inaccessible due to server error — presence marked false
- Transient DNS or network timeout during lookup

## How this service works

Deterministic public-posture audit of a domain: A/AAAA/MX/NS/TXT records, SPF, TLS certificate issuer, validity window and days until expiry, plus whether robots.txt and security.txt are published (with hashes). One call instead of a dozen lookups. No model involved — every field is read directly from DNS or the TLS handshake.

## Output

A JSON object containing: the queried domain, DNS records (A, AAAA, MX, NS, TXT arrays), SPF record value or null, TLS details (issuer name, authorized boolean, days until expiry, validity window), and presence flags plus hashes for robots.txt and security.txt.

## Response schema (JSON Schema)

```json
{
 "example": {
  "dns": {
   "a": [
    "93.184.216.34"
   ],
   "mx": [],
   "spf": null
  },
  "tls": {
   "issuer": "DigiCert Inc",
   "authorized": true,
   "days_until_expiry": 63
  },
  "domain": "example.com",
  "robots_txt": {
   "present": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/august-domain-audit-7f8f0076/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api-v3qhpbwutp.august.services](https://www.zero.xyz/host/api-v3qhpbwutp.august.services/llms.txt)