# is-port-88-open

> is-port-88-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-11).

Checks whether TCP port 88 (Kerberos) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/88?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-88-open-deeb939b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_so2cCG5sJiOhle5p9PfGV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-88-open-deeb939b
```

Example prompt: Can you check whether TCP port 88 (Kerberos) is open or closed on auth.example.com — I want to know if it's exposed to the internet without running a local scanner.

## When to prefer this

Choose this endpoint when you need a quick, passive exposure check for Kerberos (TCP port 88) on a specific host without deploying a local network scanner. It is ideal for security audits, pre-deployment firewall verification, or incident response triage where you want an external-perspective check from Cloudflare's edge. Prefer alternatives if the target is known to be Cloudflare-fronted (results will be inconclusive) or if you need a full port-range scan.

## Known failure modes

- Host is Cloudflare-fronted — result reported as inconclusive rather than accurate open/closed status
- Host is unreachable or DNS does not resolve — connection attempt times out and may return filtered
- Firewall rate-limiting may cause intermittent false filtered results
- Invalid hostname or IP provided — likely returns an error response
- Payment failure ($0.01 USDC) prevents the check from being executed

## How this service works

Is TCP port 88 (Kerberos) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for Kerberos without running a scanner. $0.01 per check.

## Output

Returns the port status (open, closed, or filtered) for TCP port 88 on the target host, along with the TCP connect time in milliseconds. If the host is behind Cloudflare's edge, the result is flagged as inconclusive because Cloudflare's network answers on behalf of the origin.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-88-open-deeb939b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)