# Tanod dnspeek Domain Inspection

> Tanod dnspeek Domain Inspection is a paid API for AI agents from tanod.dev, paid per call via x402, $0.004/call, status unknown (last checked 2026-10-11).

Inspects a domain's DNS records, email deliverability settings (SPF/DMARC/DKIM/MTA-STS), and TLS certificate in one API call

## Facts

- Endpoint: POST https://tanod.dev/v1/domain/inspect?utm_source=zero.xyz
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tanod-dnspeek-domain-inspection-8909fd26
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RwEQGG0PBamYNAf3l8Z-m

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tanod-dnspeek-domain-inspection-8909fd26 -d '<json body>'
```

Example prompt: Can you inspect the DNS records, email deliverability settings (SPF, DMARC, DKIM, MTA-STS), and TLS certificate for example.com?

## When to prefer this

Choose this endpoint when you need a quick, multi-faceted domain health snapshot — DNS records, email security posture (SPF/DMARC/DKIM/MTA-STS), and TLS cert — all in one call without having to stitch together multiple DNS and SSL lookup tools. Ideal for pre-send email deliverability checks, new domain setup verification, or lightweight domain reconnaissance. Not a replacement for a full security audit.

## Known failure modes

- Invalid or non-existent domain returns an error or empty results
- IP literals or domains with schemes (e.g. https://) rejected by input validation
- Requesting zero or more than three check sections fails schema validation
- DNS lookup timeouts for slow or unreachable nameservers
- TLS check may fail if the domain has no HTTPS endpoint

## How this service works

One MCP server and HTTP API with 193 pay-per-call tools for AI agents (security checks, chain data, finance, aviation, documents), plus free uptime and MikroTik monitoring and 130+ free browser tools. No signup; free daily tier. Operated by an AI.

## Output

Returns heuristic findings across the requested sections: DNS records (A, MX, TXT, NS, etc.), email deliverability findings for SPF, DMARC, DKIM, and MTA-STS policies, and TLS certificate details including validity and issuer. Results are diagnostic/informational, not a formal security audit.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "checks": {
   "type": "array",
   "items": {
    "enum": [
     "dns",
     "email",
     "tls"
    ],
    "type": "string"
   },
   "maxItems": 3,
   "minItems": 1,
   "description": "Which sections to run (default all three)."
  },
  "domain": {
   "type": "string",
   "maxLength": 253,
   "description": "Domain name (no scheme, no IP literal)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "email": {
   "spf": {
    "issues": [],
    "present": true,
    "all_policy": "softfail",
    "dns_lookup_terms": 8
   },
   "dmarc": {
    "pct": 100,
    "rua": "mailto:dmarc@github.com",
    "issues": [],
    "policy": "quarantine",
    "present": true,
    "subdomain_policy": "reject"
   },
   "mta_sts": false,
   "accepts_mail": true,
   "score_out_of_8": 7,
   "dkim_selectors_found": [
    "google",
    "selector1"
   ]
  },
  "notes": [],
  "checks": [
   "email"
  ],
  "domain": "github.com"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tanod-dnspeek-domain-inspection-8909fd26/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tanod.dev](https://www.zero.xyz/host/tanod.dev/llms.txt)