# is-port-69-open

> is-port-69-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-13).

Checks whether TCP port 69 (TFTP) is open, closed, or filtered on a given host, reporting connection time and Cloudflare-edge caveats.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/69?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-69-open-3fdb69b8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_M4ao4529ff9652AuJzE2J

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-69-open-3fdb69b8
```

Example prompt: Can you check whether TCP port 69 (TFTP) is open or closed on the host 192.168.1.100? I want to know if TFTP is publicly exposed without running a scanner.

## When to prefer this

Use this endpoint when you need a quick, remote check for TFTP (port 69) exposure on a host without deploying your own scanner infrastructure. Ideal for security audits, pre-deployment hardening checks, or incident response when you suspect an unintended TFTP service is running. Prefer this over general port scanners when you want a lightweight, pay-per-check API call from Cloudflare's edge. Note: not suitable for hosts fronted by Cloudflare, which will return inconclusive results.

## Known failure modes

- Cloudflare-fronted hosts return inconclusive result because Cloudflare's edge intercepts the connection attempt
- Firewalls that drop packets (rather than reject) may cause a timeout and be reported as filtered rather than closed
- Hosts with rate limiting may cause false filtered results
- Invalid or unresolvable hostname returns an error
- Temporary network issues from Cloudflare's edge may cause transient failures

## How this service works

Is TCP port 69 (TFTP) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for TFTP without running a scanner. $0.01 per check.

## Output

Returns the port status as open, closed, or filtered along with the TCP connect time in milliseconds. If the host is behind Cloudflare's edge, the result is marked inconclusive because Cloudflare answers on behalf of the origin. Gives a clear signal for TFTP exposure without requiring a local port scanner.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-69-open-3fdb69b8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)