# fetchx402 Host Intel Bundle

> fetchx402 Host Intel Bundle is a paid API for AI agents from api.fetchx402.com, paid per call via x402, $0.015/call, status unknown (last checked 2026-09-14).

Returns DNS records, leaf TLS certificate details, and RDAP/WHOIS registration data for a single public hostname in one API call.

## Facts

- Endpoint: GET https://api.fetchx402.com/v1/bundles/host-intel
- Price: $0.015/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/fetchx402-host-intel-bundle-b391dd61
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jZadIDUP--MpGO3OKOLIS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability fetchx402-host-intel-bundle-b391dd61
```

Example prompt: Can you pull together the DNS A records, TLS certificate details, and RDAP registration info all at once for example.com?

## When to prefer this

Choose this endpoint when you need DNS, TLS, and RDAP/WHOIS data together for a single hostname and want to avoid making three separate API calls. It is ideal for domain audits, security investigations, or infrastructure verification workflows where completeness and accuracy matter and guessing or stale cached data is not acceptable. Prefer individual sibling endpoints (DNS-only, TLS-only, RDAP-only) when you only need one data type to minimize cost.

## Known failure modes

- Domain is an IP address, localhost, or internal/mDNS name — rejected with validation error
- Domain does not exist or has no DNS records — DNS section returns NXDOMAIN or empty result
- TLS certificate lookup fails (no HTTPS, self-signed, or unreachable) — TLS section contains error field
- RDAP/WHOIS data unavailable for TLD — RDAP section contains error field
- Malformed domain name input — request rejected with schema validation error
- Payment not settled via x402 protocol — 402 Payment Required response

## How this service works

host intel: DNS, leaf TLS, and WHOIS/RDAP for one hostname in a single settle. Use when you need live host facts together and must not guess. Child errors stay in-field; we do not invent data.

## Output

A combined JSON object with three sections: (1) DNS records of the requested type (default A) for the domain, (2) leaf TLS certificate details including validity dates, issuer, SANs, fingerprint, and expiry, and (3) RDAP/WHOIS registration facts including registrar, registration/expiry dates, nameservers, status flags, and DNSSEC info. Child-level errors are reported inline per section rather than failing the whole response.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "headers": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Public fully-qualified domain name. Same Domain guards as the child tools. IPs, localhost, and internal/mDNS names are rejected."
      },
      "dns_type": {
       "enum": [
        "A",
        "AAAA",
        "MX",
        "TXT",
        "CNAME",
        "NS",
        "SOA"
       ],
       "type": "string",
       "description": "DNS record type passed through to DNS Explorer. Defaults to A if omitted. Does not change TLS or RDAP."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {
   "ttl": 20,
   "type": "A",
   "rcode": "NOERROR",
   "domain": "example.com",
   "records": [
    {
     "address": "104.20.23.154"
    }
   ],
   "resolver": "1.1.1.1"
  },
  "ssl": {
   "sni": "example.com",
   "port": 443,
   "sans": [
    "www.example.org",
    "example.com",
    "example.net",
    "example.org"
   ],
   "cipher": "aes_256_gcm_sha384",
   "domain": "example.com",
   "issuer": "CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US",
   "serial": "0f1a2b3c4d5e6f708192a3b4c5d6e7f8",
   "expired": false,
   "peer_ip": "23.215.0.138",
   "subject": "CN=www.example.org, O=Internet Corporation for Assigned Names and Numbers, C=US",
   "not_after": "2027-01-15T23:59:59Z",
   "not_before": "2026-01-15T00:00:00Z",
   "tls_version": "tlsv1.3",
   "not_yet_valid": false,
   "hostname_match": true,
   "fingerprint_sha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
   "signature_algorithm": "ecdsa-with-SHA384"
  },
  "whois": {
   "dnssec": true,
   "domain": "example.com",
   "handle": "2336799_DOMAIN_COM-VRSN",
   "source": "rdap",
   "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
   ],
   "registrar": {
    "name": "RESERVED-Internet Assigned Numbers Authority",
    "iana_id": "376"
   },
   "created_at": "1995-08-14T04:00:00Z",
   "expires_at": "2025-08-13T04:00:00Z",
   "updated_at": "2024-08-14T07:01:39Z",
   "nameservers": [
    "a.iana-servers.net",
    "b.iana-servers.net"
   ],
   "rdap_server": "https://rdap.verisign.com/com/v1/"
  },
  "domain": "example.com"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/fetchx402-host-intel-bundle-b391dd61/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.fetchx402.com](https://www.zero.xyz/host/api.fetchx402.com/llms.txt)