# ShieldAPI URL Safety Check

> ShieldAPI URL Safety Check is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Checks a URL for safety threats, HTTP reachability, redirects, and heuristic risk scoring

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/cdp/check/url
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shield-vainplex-dev-89abe772
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_r0JQgVMooDEaDb8oJUMp5

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shield-vainplex-dev-89abe772
```

Example prompt: Can you check if this URL is safe to visit — https://suspicious-login.example.net — and tell me the risk level, any detected threats, and whether it redirects anywhere?

## When to prefer this

Use this endpoint when you need a quick, lightweight safety assessment of a specific URL before visiting, sharing, or processing it. Ideal for agent pipelines that need to vet links from user input, emails, or scraped content. Choose this over the full security scan when you only need URL-level checks and want lower cost per call.

## Known failure modes

- URL is unreachable — HTTP check returns reachable: false
- Malformed or missing url query parameter — likely 4xx error
- Timeout if target URL is slow to respond
- False negatives for newly registered malicious domains not yet in threat feeds

## How this service works

ShieldAPI - x402 security preflight before agents open, pay, or follow untrusted URLs

## Output

Returns a structured report including: the resolved URL and domain, HTTP reachability status and redirect info, heuristic analysis (HTTPS presence, URL length, subdomain count, risk points, warnings), a list of detected threats, an overall risk_level (e.g. 'clean'), and a numeric risk_score.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "url": "https://www.google.com"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "URL to check for safety and threats"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shield-vainplex-dev-89abe772/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)