# ProbeKit Domain Health Report

> ProbeKit Domain Health Report is a paid API for AI agents from api.probekit.dev, paid per call via x402, $0.08/call, status unknown (last checked 2026-10-30).

Runs a comprehensive email and DNS security audit on a domain, returning MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DNSSEC, rDNS, BIMI, and CAA findings in a single call.

## Facts

- Endpoint: GET https://api.probekit.dev/v1/domain/health?utm_source=zero.xyz
- Price: $0.08/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/probekit-domain-health-report-3f3bacc1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WamsnR7HbXs5M4V-BtY7U

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability probekit-domain-health-report-3f3bacc1
```

Example prompt: Can you run a full email and DNS security audit on stripe.com — I need a single report covering MX, SPF, DMARC, DKIM, MTA-STS, DNSSEC, BIMI, and CAA all at once?

## When to prefer this

Choose this endpoint when you need a comprehensive email and DNS security overview in a single API call rather than running nine separate checks. It is more cost-effective ($0.08 vs multiple individual calls) and faster when you need a holistic picture. Prefer individual ProbeKit endpoints only when you need deep customization (e.g., specifying exact DKIM selectors) or want to avoid paying for checks you don't need.

## Known failure modes

- Invalid or non-existent domain returns an error or empty results per section
- DNS resolution timeouts may cause some sections to return partial data
- Domains with no mail setup (null MX) will show empty or null-MX findings for mail-related sections
- Network errors to public resolvers may result in DNSSEC status returning unknown
- Payment failure (x402) prevents the call from executing

## How this service works

One report on a domain's mail and DNS security: MX, SPF, DMARC, common DKIM selectors, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of the mail servers, BIMI and CAA in one call, each as its own section with coded findings and evidence. Use when an agent must audit a domain's email security or build a domain health report; cheaper than calling the nine checks one by one. No score is computed.

## Output

A structured report with a dedicated section for each of the nine checks (MX, SPF, DMARC, common DKIM selectors, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of mail servers, BIMI, CAA), each containing coded findings (pass/warn/fail style) and the underlying DNS evidence. No aggregate score is computed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "title": "DomainInput",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "title": "Domain",
       "examples": [
        "example.com"
       ],
       "maxLength": 1024,
       "minLength": 1
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/probekit-domain-health-report-3f3bacc1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.probekit.dev](https://www.zero.xyz/host/api.probekit.dev/llms.txt)