# CONNSKILL Domain Security Check

> CONNSKILL Domain Security Check is a paid API for AI agents from agent.connskill.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-15).

Performs a comprehensive security audit of a domain, returning DNS configuration, TLS certificate status, HTTP security headers, data breach exposure, and an overall security grade.

## Facts

- Endpoint: POST https://agent.connskill.com/v1/domain-security-check
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/connskill-domain-security-check-3f71b17a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xLfztOTSK_qz0S5eBfqVR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability connskill-domain-security-check-3f71b17a -d '<json body>'
```

Example prompt: Can you run a full security check on shopify.com and tell me its grade, whether DMARC and SPF are set up correctly, if the TLS cert is still valid, and whether it shows up in any breach records?

## When to prefer this

Choose this endpoint when you need a single-call, comprehensive domain security snapshot covering DNS email authentication (SPF, DMARC), TLS certificate health, HTTP security headers, DNSSEC, and breach exposure all at once. It is ideal for agents performing pre-partnership due diligence, automated security monitoring, or compliance checks. Prefer it over dedicated DNS or SSL checkers when you need a unified grade and multi-signal findings in one response. No account or API key is required — pay $0.05 USDC per call on Base via x402.

## Known failure modes

- Domain not found or unresolvable — DNS lookup fails, returning error or empty DNS fields
- Domain too short (under 4 characters) — rejected by input validation
- TLS check failure if the domain has no HTTPS endpoint — tls fields may be null or empty
- Rate limiting or upstream DNS/security feed unavailability causing partial results
- Payment failure via x402 protocol — call not executed if USDC payment on Base is not confirmed

## How this service works

Market data and real-world actions for AI agents: keyword and SERP research by location, SMS verification, receive-only inboxes, social marketing, EU-hosted LLMs. Paid per call in USDC on Base. No account, no API key, no minimum.

## Output

Returns a JSON object containing: overall security grade (A–F) and numeric score (0–100); DNS details including MX records, SPF all-qualifier, DMARC policy, and CAA records; TLS details including issuer, days until expiry, protocol version, and authorization status; HTTP details including CSP presence, HSTS header value, and HTTP status code; data breach exposure verdict with severity level and reasons; and a list of specific security findings with codes, descriptions, and severity levels. Also returns domain registration info including DNSSEC status, expiry date, and registrar.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 4,
   "description": "Bare domain, e.g. example.com"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {
   "mx": [
    "."
   ],
   "caa": [],
   "spfAll": "-all",
   "dmarcPolicy": "reject"
  },
  "tls": {
   "issuer": "SSL Corporation",
   "daysLeft": 53,
   "protocol": "TLSv1.3",
   "authorized": true
  },
  "http": {
   "csp": false,
   "hsts": null,
   "status": 200
  },
  "grade": "C",
  "score": 68,
  "domain": "example.com",
  "status": "delivered",
  "exposure": {
   "verdict": {
    "level": "medium",
    "reasons": [
     "12 leak record(s) mention the domain"
    ]
   }
  },
  "findings": [
   {
    "code": "no_https_redirect",
    "text": "HTTP does not redirect to HTTPS",
    "severity": "medium"
   },
   {
    "code": "no_hsts",
    "text": "No Strict-Transport-Security header",
    "severity": "low"
   }
  ],
  "registration": {
   "dnssec": true,
   "expires": "2027-08-13T04:00:00Z",
   "registrar": "RESERVED-Internet Assigned Numbers Authority"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/connskill-domain-security-check-3f71b17a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent.connskill.com](https://www.zero.xyz/host/agent.connskill.com/llms.txt)