# is-port-111-open

> is-port-111-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks whether TCP port 111 (RPC/portmapper) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/111?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-111-open-2a363afc
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Y0eQDLrf6EFu1l8Go9AhK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-111-open-2a363afc
```

Example prompt: Can you check whether TCP port 111 (the RPC portmapper) is open or closed on 198.51.100.42 — I want to know if it's exposed to the internet without having to run a scanner myself?

## When to prefer this

Use this endpoint when you need a quick, passive check of RPC port 111 exposure on a host without deploying a local network scanner. Ideal for security audits, pre-deployment checks, firewall validation, or continuous monitoring of RPC service accessibility from an external perspective. Not suitable for hosts behind Cloudflare due to the inconclusive result.

## Known failure modes

- Cloudflare-fronted hosts return 'inconclusive' because Cloudflare's edge responds before the origin can be reached
- Invalid or unresolvable hostname returns an error
- Host actively refusing connection returns 'closed'
- Firewall silently dropping packets results in 'filtered' with timeout
- Network-level routing issues may cause false negatives

## How this service works

Is TCP port 111 (RPC) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for RPC without running a scanner. $0.01 per check.

## Output

Returns whether TCP port 111 is open, closed, or filtered on the target host, along with the connection time. If the host is behind Cloudflare's edge, the result is marked as inconclusive since Cloudflare's infrastructure answers on behalf of the origin.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-111-open-2a363afc/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)