# DomainCheck

> DomainCheck is a paid API for AI agents from api.youraitools.co, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-27).

Performs a comprehensive DNS, email security, and domain registration check on any domain, URL, or email address, returning a risk score and verdict.

## Facts

- Endpoint: GET https://api.youraitools.co/domaincheck/v1/domain?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-27
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domaincheck-34be1085
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_aWyZ1BD7FlOBW-PIcbG5v

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domaincheck-34be1085
```

Example prompt: Can you run a full domain check on 'suspicioussite.net' — I want to see the DNS records, email security grade, DMARC and SPF setup, registration info, and whether it's considered low or high risk?

## When to prefer this

Choose DomainCheck when you need a single, all-in-one domain intelligence call that combines DNS records, email security posture (SPF/DKIM/DMARC), WHOIS registration data, and a scored risk verdict. It is ideal for trust-and-safety workflows, phishing triage, vendor vetting, or email deliverability audits. Prefer it over raw DNS lookup tools when you need the aggregated email security grade and risk score, and over WHOIS-only tools when DNS and email security data are also required.

## Known failure modes

- Domain not found or does not exist — 'exists' field returns false
- Invalid input format (non-domain string) — schema validation error
- RDAP/WHOIS lookup failure for registration data — registration fields may be null
- DNS resolution timeout — partial results with degraded score
- IDN encoding errors for internationalized domain names
- Rate limiting or payment failure — 402 response if USDC payment not processed

## How this service works

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

## Output

Returns a JSON object containing: DNS records (A, AAAA, MX, NS, CNAME, CAA, TXT count, DNSSEC validation), email security analysis (SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT, overall email grade, whether the domain accepts mail), domain registration details (created/expires dates, registrar, age in days, status flags), a numeric risk score (0–100), a risk verdict string (e.g. 'low_risk'), a list of risk flags with severity and description, the engine version used, and total DNS queries performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name, URL or email address, e.g. \"example.com\" (IDN allowed)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ms": 180,
  "dns": {
   "a": [
    "172.66.147.243",
    "104.20.23.154"
   ],
   "mx": [],
   "ns": [
    "hera.ns.cloudflare.com",
    "elliott.ns.cloudflare.com"
   ],
   "caa": [],
   "aaaa": [
    "2606:4700:10::6814:179a",
    "2606:4700:10::ac42:93f3"
   ],
   "cname": [],
   "null_mx": true,
   "txt_count": 2,
   "dnssec_validated": true
  },
  "tier": "full",
  "email": {
   "spf": {
    "all": "-all",
    "policy": "fail",
    "record": "v=spf1 -all",
    "present": true,
    "includes": [],
    "multiple": false,
    "redirect": null,
    "invalid_terms": [],
    "dns_lookups_top_level": 0
   },
   "bimi": {
    "present": false
   },
   "dkim": {
    "note": "DKIM selectors cannot be enumerated; only common selectors are checked, so none found does not mean DKIM is absent.",
    "selectors_found": [],
    "revoked_selectors": 10,
    "selectors_checked": 10
   },
   "dmarc": {
    "pct": 100,
    "rua": false,
    "ruf": false,
    "aspf": "s",
    "adkim": "s",
    "policy": "reject",
    "record": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
    "present": true,
    "multiple": false,
    "inherited_from": null,
    "subdomain_policy": "reject"
   },
   "grade": "A",
   "mta_sts": {
    "present": false
   },
   "tls_rpt": {
    "present": false
   },
   "mx_provider": null,
   "accepts_mail": false
  },
  "flags": [
   {
    "id": "null_mx",
    "penalty": 10,
    "severity": "medium",
    "description": "Null MX (RFC 7505): the domain explicitly accepts no email."
   }
  ],
  "input": "example.com",
  "score": 90,
  "domain": "example.com",
  "engine": "domaincheck-2026.10.21",
  "exists": true,
  "verdict": "low_risk",
  "dns_queries": 20,
  "registration": {
   "found": true,
   "domain": "example.com",
   "server": "https://rdap.verisign.com/com/v1/",
   "source": "iana-bootstrap",
   "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
   ],
   "created": "1995-08-14T04:00:00Z",
   "expires": "2027-08-13T04:00:00Z",
   "age_days": 11391,
   "available": true,
   "registrar": "RESERVED-Internet Assigned Numbers Authority",
   "nameservers": [
    "elliott.ns.cloudflare.com",
    "hera.ns.cloudflare.com"
   ],
   "dnssec_signed": true,
   "expires_in_days": 295,
   "registrar_iana_id": "376"
  },
  "public_suffix": "com",
  "registrable_domain": "example.com"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domaincheck-34be1085/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.youraitools.co](https://www.zero.xyz/host/api.youraitools.co/llms.txt)
