# Lookproof Site Health Check

> Lookproof Site Health Check is a paid API for AI agents from api.lookproof.dev, paid per call via x402, $0.025/call, status unknown (last checked 2026-10-31).

Runs a consolidated website security audit covering TLS certificate, HTTP redirect chains, security headers (HSTS, CSP, framing, Referrer-Policy, cookies), and domain registration status in a single call.

## Facts

- Endpoint: GET https://api.lookproof.dev/v1/site/health?utm_source=zero.xyz
- Price: $0.025/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lookproof-site-health-check-8a9554ab
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wARMK2qfhpPuIvNHAzfON

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lookproof-site-health-check-8a9554ab
```

Example prompt: Can you run a full site health check on stripe.com — I want to see the TLS certificate details, whether HTTP redirects properly to HTTPS with HSTS, what security headers like CSP and frame protection are set, and when the domain registration expires?

## When to prefer this

Prefer this endpoint when you need a consolidated website security audit in a single call rather than invoking separate TLS, redirect, header, and RDAP checks individually. It is more cost-efficient than three separate checks and ideal for building site health dashboards, pre-launch checklists, or automated monitoring workflows. Use sibling endpoints instead when you need only one specific signal (e.g. TLS-only or RDAP-only) and want to minimize latency or cost for that narrower use case.

## Known failure modes

- Domain is a public suffix (e.g. co.uk) — RDAP registration lookup will return no results
- Domain does not resolve or has no server on port 443 — TLS section will report connection failure
- RDAP registry for the TLD is unavailable — domain expiry section may be incomplete
- Invalid or malformed domain input — request rejected with validation error
- Server behind the domain times out — redirect chain section may be partial

## How this service works

Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.

## Output

Returns a structured multi-section report with coded findings for: TLS certificate (trust chain, name match, expiry date, key details), HTTP and HTTPS redirect chains with HSTS presence, Content Security Policy, X-Frame-Options, Referrer-Policy and cookie security flags, and domain registration data from RDAP including expiry date and EPP statuses. No numeric score is computed; each section contains discrete findings.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "title": "RdapInput",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "title": "Domain",
       "examples": [
        "example.com"
       ],
       "maxLength": 1024,
       "minLength": 1
      }
     },
     "description": "A domain or a host under it; a public suffix itself (e.g. co.uk) has no registration.",
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lookproof-site-health-check-8a9554ab/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.lookproof.dev](https://www.zero.xyz/host/api.lookproof.dev/llms.txt)