# is-port-389-open

> is-port-389-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks whether TCP port 389 (LDAP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/389?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-389-open-718f3a47
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9k3wXP0ZEwWZtu9-1L5rd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-389-open-718f3a47
```

Example prompt: Can you check if TCP port 389 (LDAP) is open or exposed on the host ldap.example.com? I want to know if it's reachable from the public internet without running a scanner.

## When to prefer this

Choose this endpoint when you need a quick, lightweight check of LDAP port 389 accessibility on a specific host without deploying a full port scanner. It's ideal for security audits, firewall validation, and infrastructure exposure checks. Note: if the target is Cloudflare-fronted, results will be inconclusive — use a different method for those hosts.

## Known failure modes

- Cloudflare-fronted hosts return inconclusive result because Cloudflare's edge intercepts the connection
- Invalid or unresolvable hostname returns an error
- Filtered ports may be indistinguishable from slow connections depending on timeout behavior
- Network issues at Cloudflare's edge may cause transient errors

## How this service works

Is TCP port 389 (LDAP) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for LDAP without running a scanner. $0.01 per check.

## Output

Returns whether TCP port 389 is open, closed, or filtered on the target host, along with the connection time. If the host is behind Cloudflare's edge network, the result is marked inconclusive since Cloudflare answers on behalf of the origin.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-389-open-718f3a47/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)