# is-port-995-open

> is-port-995-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-13).

Checks whether TCP port 995 (POP3S) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/995?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-995-open-d1f28366
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_V2dDwgZmaXMakAIYsWkKi

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-995-open-d1f28366
```

Example prompt: Can you check whether TCP port 995 (POP3S) is open on mail.example.com — I want to know if it's reachable from the internet without running a scanner myself?

## When to prefer this

Choose this endpoint when you need a quick, lightweight check of POP3S (port 995) exposure on a specific host without deploying a network scanner or having direct network access to the target. Ideal for security audits, mail server configuration verification, and firewall rule validation where a single-port probe suffices.

## Known failure modes

- Host behind Cloudflare returns inconclusive result — Cloudflare edge answers instead of the origin
- Invalid or unresolvable hostname causes an error response
- Timeout if host is heavily filtered and connection hangs
- Rate limiting or payment failure if the $0.01 USDC per-call fee is not satisfied

## How this service works

Is TCP port 995 (POP3S) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for POP3S without running a scanner. $0.01 per check.

## Output

Returns the port status (open, closed, or filtered) for TCP port 995 on the target host, along with the connection time in milliseconds. If the host is behind Cloudflare's edge network, the result is flagged as inconclusive since Cloudflare intercepts the connection on behalf of the origin.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-995-open-d1f28366/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)