# RelayShield Identity Risk Score

> RelayShield Identity Risk Score is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.35/call, status unknown (last checked 2026-09-14).

Scores a domain's identity risk across 6 dimensions including breach exposure, CVE exposure, infostealer density, ransomware, session exposure, and threat actor targeting

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/identity-risk-score
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-identity-risk-score-82f394d7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_okFMhupV7lfz40EYPNtkF

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-identity-risk-score-82f394d7 -d '<json body>'
```

Example prompt: What's the identity risk score for stripe.com — I want to know its overall risk grade, breach exposure, and whether it's been targeted by threat actors or infostealers.

## When to prefer this

Use this endpoint when you need a fast, multi-dimensional identity risk profile for a specific domain — particularly when you care about breach history, infostealer exposure, CVE risk, and threat actor targeting in a single scored response. Prefer this over generic WHOIS or reputation lookups when you need a structured risk grade and breakdown across identity-specific threat dimensions rather than just blocklist or DNS data.

## Known failure modes

- Invalid or malformed domain input returns an error
- Unknown or unregistered domain may return limited signal data
- Payment failure via x402 protocol results in no response
- Rate limiting or quota exhaustion may block repeated calls
- Domain with no threat intelligence history may return all-zero dimension scores

## How this service works

RelayShield Landing Site

## Output

Returns a JSON object with an overall risk grade (A–F), numeric risk score (0–100), risk level label (e.g. LOW/MEDIUM/HIGH), a human-readable summary, a list of risk factors, and individual dimension scores for CVE exposure, breach exposure, session exposure, infostealer density, ransomware exposure, and threat actor targeting.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Root domain to score"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "grade": "A",
   "domain": "acme.com",
   "summary": "Domain acme.com scores 10/100 (A — LOW) across 2 of 6 monitored identity signal dimensions.",
   "max_score": 100,
   "risk_level": "LOW",
   "risk_score": 10,
   "risk_factors": [
    "Breach exposure: 1 known breach event(s), 50,000 accounts affected"
   ],
   "dimension_scores": {
    "cve_exposure": 5,
    "breach_exposure": 5,
    "session_exposure": 0,
    "infostealer_density": 0,
    "ransomware_exposure": 0,
    "threat_actor_targeting": 0
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-identity-risk-score-82f394d7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)