# Domain Trust Assessment API

> Domain Trust Assessment API is a paid API for AI agents from x402-tollbooth.onrender.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks whether a domain, URL, or email address is trustworthy by analyzing DNS health, domain age, registrar data, and spam/disposable-provider flags, returning a trust verdict with reasons.

## Facts

- Endpoint: GET https://x402-tollbooth.onrender.com/api/domain-trust?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-trust-assessment-api-b4b7f0ab
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_W8pQfaJPlMwEj1_cIYrnM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-trust-assessment-api-b4b7f0ab
```

Example prompt: Can you check if the domain 'acme-invoices.net' is trustworthy — I want to know if it's legitimate before I respond to an email from them, including whether it has proper SPF and DMARC records and how old it is.

## When to prefer this

Use this endpoint when you need a multi-signal trust verdict for a domain or email address before taking action — particularly when you want DNS mail health (SPF, DMARC, MX), domain age, registrar provenance, and disposable/typo-lookalike detection combined in a single call. Prefer it over basic MX-only email verifiers when fraud detection or phishing risk assessment is the goal.

## Known failure modes

- Invalid or malformed target input returns an error
- Domain not found in RDAP returns unknown verdict with limited data
- DNS lookup failures may result in incomplete MX/SPF/DMARC signals
- Very new domains may lack registrar data, reducing verdict confidence
- Payment failure (402) if USDC balance is insufficient

## How this service works

Check whether a domain or email address is trustworthy before you contact it, sign it up, or trust it. Returns a trusted/caution/high_risk/unknown verdict with reasons, based on DNS and mail health (MX, SPF, DMARC), domain age and registrar (RDAP), and disposable, free-provider and typo-lookalike flags. Accepts a domain, URL or email address.

## Output

Returns a trust verdict (trusted, caution, high_risk, or unknown) along with a list of reasons explaining the verdict, DNS and mail health signals (MX, SPF, DMARC presence and validity), domain age, registrar information from RDAP, and flags for disposable providers, free email providers, and typo-lookalike patterns.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "target"
     ],
     "properties": {
      "target": {
       "type": "string",
       "description": "A domain (example.com), URL, or email address (user@example.com) to assess."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-trust-assessment-api-b4b7f0ab/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-tollbooth.onrender.com](https://www.zero.xyz/host/x402-tollbooth.onrender.com/llms.txt)