# is-port-11211-open

> is-port-11211-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-09).

Checks whether TCP port 11211 (Memcached) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/11211?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-09
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-11211-open-99124991
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_aOI-Dnv5lkiMwcTlIyaoI

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-11211-open-99124991
```

Example prompt: Can you check whether port 11211 (Memcached) is open or exposed on the host 203.0.113.45? I want to know if it's reachable from the outside without running a local scanner.

## When to prefer this

Use this endpoint when you need a lightweight, no-infrastructure check for whether Memcached (port 11211) is publicly accessible on a specific host, without deploying your own port scanner. Ideal for security audits, firewall validation, and incident response where you want an external perspective from Cloudflare's edge. Not suitable for Cloudflare-fronted hosts (flagged as inconclusive) or when you need bulk scanning across many hosts simultaneously (use a bulk endpoint if available).

## Known failure modes

- Host resolves to a Cloudflare IP — result is inconclusive rather than accurate
- Invalid hostname or IP format — request rejected
- Host is unreachable or DNS fails — may return filtered or error
- Network timeout — port may be reported as filtered even if open behind a slow firewall
- False negatives for hosts with rate-limiting or connection throttling

## How this service works

Is TCP port 9300 (Elasticsearch transport) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for Elasticsearch transport without running a scanner. $0.01 per check.

## Output

Returns whether TCP port 11211 is open, closed, or filtered on the target host, along with the connection time in milliseconds. If the host is fronted by Cloudflare's edge network, the result is flagged as inconclusive because Cloudflare answers on behalf of the origin, making the true port state indeterminate.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-11211-open-99124991/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)