# ShieldAPI Full Security Scan

> ShieldAPI Full Security Scan is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Performs a comprehensive composite security scan on a domain, URL, IP, or email — combining DNS, SSL, blacklist, and reputation checks into a single risk assessment

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/cdp/full/scan
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shield-vainplex-dev-9a5bfa34
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VTOV0of0WTxOnT9xaOlhZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shield-vainplex-dev-9a5bfa34
```

Example prompt: Run a full security scan on example.com — I want to know its DNS records, SSL status, blacklist standing, and overall risk level all in one shot.

## When to prefer this

Use this endpoint when you need a holistic security assessment of a target in a single API call rather than calling individual checks (DNS, SSL, blacklist, reputation) separately. Ideal for agent-driven security triage, pre-flight checks before interacting with unknown domains, or building security dashboards that need combined risk signals. Prefer this over the individual ShieldAPI endpoints when breadth matters more than depth on any single check.

## Known failure modes

- Invalid or unresolvable target returns an error or empty DNS results
- Target IP/domain not reachable may result in partial check completion
- Blacklist DNS resolver errors may mark individual list checks as resolver-error-code rather than listed/unlisted
- Missing required 'target' query parameter returns a 400-level error
- Rate limiting or payment failure returns a 402 Payment Required response

## How this service works

ShieldAPI - x402 security preflight for high-risk agent payment, trust, or connection decisions

## Output

Returns a structured scan report including: DNS records (A, MX, NS, TXT), SPF/DMARC presence, SSL validity and HTTP status, blacklist checks across multiple DNSBL providers (Spamhaus, SpamCop, SORBS), per-check risk scores, an overall risk level (low/medium/high), a risk score, and a human-readable summary of findings — all grouped under a unique scan_id with timestamp.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "target": "example.com"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "target"
     ],
     "properties": {
      "target": {
       "type": "string",
       "description": "Domain, URL, IP, or Email to perform a full composite scan against"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shield-vainplex-dev-9a5bfa34/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)