# OrionCMD Domain Grade

> OrionCMD Domain Grade is a paid API for AI agents from api.orioncmd.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-13).

Returns an A-F security grade and 0-100 score for a domain, with per-category breakdowns across TLS, email auth, HTTP headers, DNS, and registration expiry.

## Facts

- Endpoint: GET https://api.orioncmd.com/v1/domain-grade?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/orioncmd-domain-grade-24108ece
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_coIm-4YIfY0qxFVMktV2N

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability orioncmd-domain-grade-24108ece
```

Example prompt: Can you run a security grade check on mybusiness.com and tell me its overall A-F score, how it breaks down across TLS, email auth, headers, DNS, and expiry, and what the top fixes are?

## When to prefer this

Choose this endpoint when you need a summarized, graded security assessment of a domain rather than raw certificate or DNS data. It is the right choice when you want a human-readable A-F scorecard covering TLS, email auth (SPF/DKIM/DMARC), security headers, DNS hygiene, and expiry all in one call. Prefer /v1/site-health instead if you only need raw cert or DNS data without scoring. This endpoint is best for audits, client reports, compliance checks, or any workflow that needs actionable prioritized fixes.

## Known failure modes

- Domain does not resolve — DNS lookup failure, returns error or low score with notes
- Invalid or malformed domain input — API may return a 400 or validation error
- Domain is unreachable or times out — partial score returned with missing category data
- Rate limiting or payment failure — 402 or 429 response if x402 payment is not processed
- Private/internal domain — may return incomplete data for non-public hostnames

## How this service works

OrionCMD Checks: Domain security grade A-F with a per-category breakdown. Runs the cert, DNS, expiry, email-auth and security-header checks and scores them: TLS 25, email auth 25, HTTP headers 20, DNS (resolves, DNSSEC, CAA) 15, registration expiry 15. Returns one A-F letter, a 0-100 score, each category's points and notes, and the top fixes. Unlike /v1/site-health (raw cert/DNS/expiry data, no grade), this is a graded scorecard that also covers email auth and headers.

## Output

Returns a letter grade (A-F), a numeric score from 0-100, and per-category scores with notes: TLS (up to 25 pts), email authentication (up to 25 pts), HTTP security headers (up to 20 pts), DNS health including DNSSEC and CAA (up to 15 pts), and domain registration expiry (up to 15 pts). Also includes a prioritized list of the top recommended fixes.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Hostname or URL, e.g. example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/orioncmd-domain-grade-24108ece/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.orioncmd.com](https://www.zero.xyz/host/api.orioncmd.com/llms.txt)