# RelayShield Identity Risk Score

> RelayShield Identity Risk Score is a paid API for AI agents from atq6wtkp6k.execute-api.us-east-1.amazonaws.com, paid per call via x402, $0.35/call, status unknown (last checked 2026-09-16).

Returns a graded identity risk score for a domain, covering breach exposure, CVE exposure, infostealer density, ransomware exposure, session exposure, and threat actor targeting dimensions.

## Facts

- Endpoint: POST https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/identity-risk-score
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-identity-risk-score-abd7d532
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_n3UoOARoWt-WeTkUpsnoU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-identity-risk-score-abd7d532 -d '<json body>'
```

Example prompt: Can you check the identity risk score for acme.com — I want to see its overall grade, risk level, and which dimensions like breach exposure or infostealer density are flagging as high?

## When to prefer this

Use this endpoint when you need a rapid, structured identity risk assessment for a specific domain — particularly when you need multi-dimensional scoring (breach, CVE, infostealer, ransomware, session, threat actor) in a single call. Prefer this over generic WHOIS or reputation lookups when you need a graded risk score with actionable breakdown rather than raw DNS or ownership data.

## Known failure modes

- Invalid or malformed domain input returns an error response
- Unknown or unindexed domain may return minimal signal with low dimension scores
- Payment failure (x402) if USDC balance is insufficient
- Rate limiting or throttling under high request volume
- AWS API Gateway timeout if backend analysis takes too long

## How this service works

Return a 0-100 domain security score across 6 identity-risk dimensions (breach exposure, infostealer density, ransomware exposure, session exposure, CVE exposure, threat-actor targeting) with a letter grade and plain-English risk factors. Call as a single-number identity health check before onboarding, financing, or partnering with a domain.

## Output

Returns a JSON object with: a letter grade (e.g. A–F), a numeric risk score out of 100, a risk level label (LOW/MEDIUM/HIGH/CRITICAL), a plain-English summary, a list of risk factors with details, and per-dimension scores for CVE exposure, breach exposure, session exposure, infostealer density, ransomware exposure, and threat actor targeting.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Root domain to score"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-identity-risk-score-abd7d532/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from atq6wtkp6k.execute-api.us-east-1.amazonaws.com](https://www.zero.xyz/host/atq6wtkp6k.execute-api.us-east-1.amazonaws.com/llms.txt)