# Halowerk Domain Intel

> Halowerk Domain Intel is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Returns a comprehensive domain profile including DNS records, mail security configuration, TLS certificate details, WHOIS data, registrability status, and subdomains from Certificate Transparency logs.

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/domain/intel
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-domain-intel-80e197d1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yTSHSc_1Jv5BvEwGJC0Az

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-domain-intel-80e197d1 -d '<json body>'
```

Example prompt: Can you pull a full domain intel report for example.com — I want to see the DNS records, mail security setup like SPF and DMARC, TLS certificate expiry, and any subdomains from certificate transparency?

## When to prefer this

Choose this endpoint when you need a comprehensive, all-in-one domain intelligence snapshot covering DNS, mail security, TLS, and WHOIS in a single call. It is ideal for security audits, pre-acquisition due diligence, email deliverability checks, and domain enumeration tasks where querying multiple individual DNS tools would be time-consuming. Prefer it over generic DNS lookup tools when you specifically need mail security posture (SPF/DMARC/DKIM/MTA-STS), certificate transparency subdomains, or registrability combined with DNS data.

## Known failure modes

- Domain does not exist or is invalid — returns error or empty record set
- WHOIS data unavailable due to privacy protection or registry restrictions
- Certificate Transparency logs may not include all subdomains for newly registered domains
- DNS lookup timeout for unresponsive authoritative nameservers
- DKIM hint may be absent if no known selector is discoverable

## How this service works

Vollständiges Domainprofil: A/AAAA/MX/NS/TXT/CNAME/SOA, Mail-Setup (SPF, DMARC, DKIM-Hinweis, MTA-STS), TLS-Zertifikat mit Restlaufzeit, WHOIS-Kerndaten, Registrierbarkeit und Subdomains aus Certificate Transparency.

## Output

A structured JSON profile containing: all major DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA), email security details (SPF policy, DMARC policy, DKIM hint, MTA-STS status), TLS certificate information with remaining validity days, WHOIS core data (registrar, registration/expiry dates, nameservers), domain registrability status, and a list of subdomains discovered via Certificate Transparency logs.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain ohne Schema, z. B. example.com"
  },
  "include_tls": {
   "type": "boolean",
   "default": true
  },
  "include_whois": {
   "type": "boolean",
   "default": true
  },
  "include_subdomains": {
   "type": "boolean",
   "default": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-domain-intel-80e197d1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)