# DATA/AGENT FOUNDRY — Domain Host Trust

> DATA/AGENT FOUNDRY — Domain Host Trust is a paid API for AI agents from foundry-api-production-95ae.up.railway.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-31).

Checks the real-time trustworthiness of a public DNS hostname by observing DNS resolution, TLS certificate validity, HTTP security headers, and DNSSEC state.

## Facts

- Endpoint: POST https://foundry-api-production-95ae.up.railway.app/v1/domain-host-trust?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/data-agent-foundry-domain-host-trust-3eac8e05
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-4yVI48YqBy3Gxse9KrWk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability data-agent-foundry-domain-host-trust-3eac8e05 -d '<json body>'
```

Example prompt: Can you check the domain trust status for stripe.com — I want to know if it has valid TLS, DNSSEC, and proper HTTP security headers before we integrate it?

## When to prefer this

Choose this endpoint when you need a real-time, machine-readable trust signal about a specific public hostname — especially for pre-integration vetting, phishing domain triage, or supply chain monitoring. It is uniquely structured for agent-driven workflows: UNKNOWN and DATA_GAP results are free, making it safe to probe speculatively. Prefer it over passive WHOIS lookups when you need active observations (TLS, DNS resolution, security headers) rather than registration metadata.

## Known failure modes

- Hostname rejected if it contains URLs, ports, paths, or IP literals (validation error returned)
- Result state UNKNOWN if the host cannot be observed or is unreachable
- DATA_GAP result if observations are incomplete — neither billable
- DNSSEC state returns UNKNOWN_NOT_OBSERVED if DNSSEC data was not collected
- TLS and HTTP header states return UNKNOWN if the host did not respond over HTTPS

## How this service works

Machine-first active product portfolio. Lifecycle is the CONTROL_SKU; UNKNOWN and DATA GAP results are not billable.

## Output

Returns a JSON object containing: a trust decision state (e.g. UNKNOWN, GREEN), DNS resolution addresses and DNSSEC state, TLS certificate validity state, HTTP security headers presence map, freshness metadata (observed_at timestamp, max_age_seconds), billability flag and quantity, provenance list, and a unique run_id and request_id. UNKNOWN and DATA_GAP results are not billed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "hostname": {
   "type": "string",
   "example": "example.org",
   "maxLength": 253,
   "minLength": 1,
   "description": "Public DNS hostname only; URLs, ports, paths and IP literals are rejected."
  },
  "schema_version": {
   "const": "1.0"
  },
  "client_request_id": {
   "type": "string",
   "maxLength": 200,
   "minLength": 1
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "rights": {
   "state": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS",
   "whois_bulk_content": false,
   "third_party_reputation_feed": false
  },
  "run_id": "run_domain_example",
  "decision": {
   "state": "UNKNOWN",
   "reasons": [
    "OBSERVATION_UNAVAILABLE"
   ]
  },
  "hostname": "example.org",
  "metering": {
   "unit": "domain_host_trust_record",
   "billable": false,
   "quantity": 0
  },
  "freshness": {
   "state": "FRESH",
   "observed_at": "2026-09-30T20:00:00.000Z",
   "max_age_seconds": 300
  },
  "commercial": {
   "pricing_version": "domain-host-trust-v1"
  },
  "product_id": "foundry.domain-host-trust-record.v1",
  "provenance": [],
  "request_id": "req_domain_example",
  "observed_at": "2026-09-30T20:00:00.000Z",
  "result_state": "UNKNOWN",
  "dns_resolution": {
   "addresses": [],
   "dnssec_state": "UNKNOWN_NOT_OBSERVED"
  },
  "schema_version": "1.0",
  "client_request_id": null,
  "http_security_headers": {
   "state": "UNKNOWN",
   "present": {}
  },
  "tls_certificate_validity": {
   "state": "UNKNOWN"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/data-agent-foundry-domain-host-trust-3eac8e05/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from foundry-api-production-95ae.up.railway.app](https://www.zero.xyz/host/foundry-api-production-95ae.up.railway.app/llms.txt)