# ShieldAPI Domain Reputation Check

> ShieldAPI Domain Reputation Check is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Checks a domain's security reputation, DNS records, SSL validity, blacklist status, and risk score for agent security purposes

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/cdp/check/domain
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shield-vainplex-dev-4871fe5b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Ul4UTauM4hurRY9mq38Lw

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shield-vainplex-dev-4871fe5b
```

Example prompt: Can you run a security reputation check on the domain 'suspiciousite.io' — I want to know its risk level, whether it's blacklisted anywhere, and if its DNS and SSL look legitimate before I let my agent interact with it.

## When to prefer this

Use this endpoint when an AI agent needs to vet an unknown domain before interacting with it, sending data to it, or allowing it into a workflow. Especially useful for agent security pipelines where dynamically discovered URLs or API endpoints need trust scoring. Prefer over generic WHOIS tools when you need blacklist status, DNS health, and risk scoring in a single call.

## Known failure modes

- Invalid or malformed domain name returns validation error
- Domain does not exist or has no DNS records — partial results returned with has_records false
- DNS resolver errors on blacklist checks noted as resolver-error-code in blacklist results
- Network timeout if DNS lookups are slow — may return incomplete DNS data
- Missing required 'domain' query parameter returns 400 or similar error

## How this service works

ShieldAPI - x402 security preflight before agents trust a domain, merchant, issuer, or callback host

## Output

Returns a JSON object containing: DNS records (A, MX, NS, TXT), SPF/DMARC presence flags, SSL validity and HTTP status, blacklist check results across multiple lists (Spamhaus, SpamCop, SORBS), an overall risk_score (0–100), and a risk_level string (e.g. 'low', 'medium', 'high').

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "domain": "example.com"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name to check for reputation and agent security risks (e.g. vainplex.dev)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shield-vainplex-dev-4871fe5b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)