# ipv4.fr Domain Audit API

> ipv4.fr Domain Audit API is a paid API for AI agents from ipv4.fr, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-29).

Performs a comprehensive security audit of a domain, checking DNS, TLS/SSL, HTTPS, email configuration (DMARC/SPF), and blacklists, then returns a graded report with actionable findings.

## Facts

- Endpoint: GET https://ipv4.fr/x402/v1/audit/%7Bdomain%7D?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ipv4-fr-domain-audit-api-afd0c1b2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_cNgQR4uF5Olnp6PVeTRLR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ipv4-fr-domain-audit-api-afd0c1b2
```

Example prompt: Can you run a full security audit on example.com and tell me what grade it gets, whether it has DMARC and HSTS set up, and what I need to fix?

## When to prefer this

Choose this endpoint when you need a holistic, graded security audit of a domain in a single call — covering DNS, TLS, email security (DMARC/SPF), HTTPS/HSTS, and blacklists simultaneously. Prefer it over individual point-checks when you need an actionable remediation report with severity-ranked findings rather than raw record lookups.

## Known failure modes

- Invalid or non-existent domain returns error or empty check results
- Network timeout if domain DNS is unresponsive
- Blacklist check may be partial if external blacklist providers are unavailable
- Cached results may not reflect very recent domain changes
- Payment failure if USDC balance is insufficient for the $0.05 per-call fee

## How this service works

Fast, reliable network tools API. IP geolocation, DNS lookup, SSL check, WHOIS, email validation, port scan. Free tier available.

## Output

A JSON report containing: a letter grade (e.g. 'C') and numeric score (0-100), a plain-English summary, a list of findings with severity, category, detail, and specific fix instructions, a list of strengths, plus raw check results for DNS, TLS, HTTPS, email, and blacklists. Indicates whether the result was served from cache.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "cached": false,
  "checks": {
   "dns": {},
   "tls": {},
   "email": {},
   "https": {},
   "blacklists": [],
   "registration": {}
  },
  "domain": "example.com",
  "report": {
   "grade": "C",
   "score": 72,
   "summary": "Valid TLS but no DMARC and missing HSTS.",
   "findings": [
    {
     "fix": "_dmarc.example.com TXT \"v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com\"",
     "title": "No DMARC record",
     "detail": "Anyone can spoof mail from this domain.",
     "category": "email",
     "severity": "high"
    }
   ],
   "strengths": [
    "Valid TLS certificate"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ipv4-fr-domain-audit-api-afd0c1b2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ipv4.fr](https://www.zero.xyz/host/ipv4.fr/llms.txt)