# Formwerk iFrame Submission Target Domain Checker

> Formwerk iFrame Submission Target Domain Checker is a paid API for AI agents from formwerk.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Checks an iframe element on a web page to determine the target domain to which form data is being submitted.

## Facts

- Endpoint: POST https://formwerk.halowerk.com/v1/pruef/formwerk/ziel/iframe
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/formwerk-iframe-submission-target-domain-checker-ade72b96
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6mLkCqY4l26x4NUz4jFRH

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability formwerk-iframe-submission-target-domain-checker-ade72b96 -d '<json body>'
```

Example prompt: Can you check the iframe on https://example.com/contact to see what domain its embedded form is submitting data to?

## When to prefer this

Use this endpoint when you need to specifically inspect iframe elements on a webpage to determine where embedded forms submit their data — particularly useful for security audits, privacy compliance checks, or verifying that embedded third-party iframes are not exfiltrating form data to unexpected domains. Prefer this over the sibling 'skript' or 'eingabefeld' endpoints when the form submission occurs inside an iframe rather than directly on the page or via a script.

## Known failure modes

- URL is not publicly accessible or returns a non-200 status
- No iframe found on the page or CSS selector matches no element
- The iframe contains no form or submission target is indeterminate
- Input URL is malformed or exceeds the 2048-character limit
- Target page blocks headless browser or automated access
- Network timeout while loading the page or iframe content

## How this service works

Prüft am Objekt iframe den Befund Zieldomain der Übermittlung.

## Output

Returns a finding that identifies the target domain to which the iframe element's form data is submitted, including the destination URL or domain extracted from the iframe's form action or submission logic on the inspected page.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ziel": {
   "oneOf": [
    {
     "type": "string",
     "maxLength": 2048,
     "minLength": 1,
     "description": "Öffentliche HTTP(S)-Adresse; bei DNS-Befunden Domain oder öffentliche IP."
    },
    {
     "type": "object",
     "required": [
      "adresse"
     ],
     "properties": {
      "adresse": {
       "type": "string",
       "maxLength": 2048,
       "minLength": 1
      },
      "selektor": {
       "type": "string",
       "maxLength": 240,
       "minLength": 1,
       "description": "CSS-Selektor: genau ein Objekt, sonst erster Treffer des Objektfilters."
      },
      "vergleich": {
       "type": "string",
       "maxLength": 2048,
       "description": "Öffentliche Vergleichsadresse für Link-, Sitemap- oder Sprachbefunde."
      },
      "user_agent": {
       "type": "string",
       "pattern": "^[A-Za-z0-9_-]{1,80}$"
      },
      "dkim_selektor": {
       "type": "string",
       "pattern": "^[A-Za-z0-9_-]{1,63}$"
      }
     },
     "additionalProperties": false
    }
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/formwerk-iframe-submission-target-domain-checker-ade72b96/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from formwerk.halowerk.com](https://www.zero.xyz/host/formwerk.halowerk.com/llms.txt)
