# Tinstop Domain Security Audit API

> Tinstop Domain Security Audit API is a paid API for AI agents from tinstop.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-15).

Performs a comprehensive security and performance audit of a domain, checking DNS, SSL/TLS, HTTP headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed, returning a scored risk report with actionable issue fixes.

## Facts

- Endpoint: POST https://tinstop.com/v1/domain/audit
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tinstop-domain-security-audit-api-ce4bf677
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_NEbQKQIZm9gS0DBs1DhCr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tinstop-domain-security-audit-api-ce4bf677 -d '<json body>'
```

Example prompt: Can you run a full security audit on stripe.com and tell me the overall score, any critical or high-severity issues, and what I should fix first?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-dimensional domain security audit in a single call without requiring an account or API key. It is ideal for agents that need to programmatically assess domain health covering DNS, SSL, email authentication, and HTTP headers together, rather than piecing together multiple specialized tools. The pay-per-call USDC model via x402 makes it suitable for on-demand, low-friction agent workflows where subscriptions are impractical.

## Known failure modes

- Invalid domain format (including http:// prefix) — API likely returns a validation error
- Domain does not exist or is unreachable — may return empty or partial check results
- Payment failure via x402/USDC — request blocked if payment not confirmed
- Rate limits or upstream DNS/SSL provider timeouts — may result in incomplete audit data
- Cached responses returned for recently audited domains — data may not reflect very recent changes

## How this service works

Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.

## Output

Returns a JSON object containing: an overall security score (0-100, 100 = optimal), weighted category subscores for DNS (15%), SSL (30%), headers (25%), and email authentication (30%), a list of identified issues with severity (critical/high/medium/low), human-readable impact descriptions, and actionable fix recommendations, plus raw check results, a unique scan ID, audit timestamp, and whether the response was served from cache.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "The domain name to audit (e.g. 'example.com'). Do not include http:// or https:// protocol prefixes."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "title": "AuditResponse",
 "required": [
  "domain",
  "score",
  "subscores",
  "issues",
  "checks",
  "audited_at",
  "cached",
  "scan_id"
 ],
 "properties": {
  "score": {
   "type": "integer",
   "title": "Score",
   "description": "Calculated security risk score (0-100), where 100 is optimal"
  },
  "cached": {
   "type": "boolean",
   "title": "Cached",
   "description": "True if response was served from cache"
  },
  "checks": {
   "type": "object",
   "title": "Checks",
   "description": "Raw check results for DNS records, SSL certificates, headers, and email authentication",
   "additionalProperties": true
  },
  "domain": {
   "type": "string",
   "title": "Domain",
   "description": "Audited domain name"
  },
  "issues": {
   "type": "array",
   "items": {
    "type": "object",
    "title": "AuditIssue",
    "required": [
     "severity",
     "type",
     "impact",
     "fix"
    ],
    "properties": {
     "fix": {
      "type": "string",
      "title": "Fix",
      "description": "Actionable recommendation to resolve the issue"
     },
     "type": {
      "type": "string",
      "title": "Type",
      "description": "Specific category identifier for the issue"
     },
     "impact": {
      "type": "string",
      "title": "Impact",
      "description": "Details regarding security impact"
     },
     "severity": {
      "type": "string",
      "title": "Severity",
      "description": "Issue severity: critical, high, medium, or low"
     }
    }
   },
   "title": "Issues",
   "description": "Identified security issues and vulnerabilities"
  },
  "scan_id": {
   "type": "string",
   "title": "Scan Id",
   "description": "The unique database record tracking ID for this scan"
  },
  "subscores": {
   "type": "object",
   "title": "Subscores",
   "description": "Weighted category scores: dns (15%), ssl (30%), headers (25%), email (30%)",
   "additionalProperties": {
    "type": "integer"
   }
  },
  "audited_at": {
   "type": "string",
   "title": "Audited At",
   "description": "ISO 8601 UTC timestamp of the audit request"
  },
  "request_id": {
   "anyOf": [
    {
     "type": "string"
    },
    {
     "type": "null"
    }
   ],
   "title": "Request Id",
   "description": "Gateway request tracking ID"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tinstop-domain-security-audit-api-ce4bf677/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tinstop.com](https://www.zero.xyz/host/tinstop.com/llms.txt)