# Tinstop Domain Security Audit API

> Tinstop Domain Security Audit API is a paid API for AI agents from tinstop.com, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-15).

Performs a comprehensive domain security and performance audit covering DNS, SSL/TLS, HTTP headers, SPF/DKIM/DMARC, and Google PageSpeed for any given domain

## Facts

- Endpoint: POST https://tinstop.com/v1/domain/overview
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tinstop-domain-security-audit-api-f74006d0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_W1fmoHpGr8wjyuyvX3Ayo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tinstop-domain-security-audit-api-f74006d0 -d '<json body>'
```

Example prompt: Can you run a full security and performance audit on stripe.com — I want to see their DNS setup, SSL status, security headers, SPF/DKIM/DMARC email auth, and PageSpeed score?

## When to prefer this

Choose this endpoint when you need a one-call, pay-per-use domain security and performance overview without API key registration. Ideal for agents that need to audit arbitrary domains on demand, check email authentication configuration, or verify HTTP security hardening. Prefer this over manual DNS/SSL tools when you need a consolidated report covering all major security dimensions in a single API call and want to pay per use with USDC on Base via x402.

## Known failure modes

- Invalid or non-existent domain name returns an error
- Domain with no DNS records may return empty or partial results
- Payment failure via x402/USDC results in 402 Payment Required response
- Timeout if the target domain is slow to respond
- Domain provided with http/https prefix may fail or return unexpected results

## How this service works

Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.

## Output

Returns a comprehensive JSON audit report for the specified domain, including DNS record details, SSL/TLS certificate validity and configuration, HTTP security headers presence and values (e.g. HSTS, CSP, X-Frame-Options), email authentication records (SPF, DKIM, DMARC), and Google PageSpeed performance metrics.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain name (e.g. 'example.com'). No http/https prefix."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "title": "Response Domain Overview V1 Domain Overview Post",
 "additionalProperties": true
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tinstop-domain-security-audit-api-f74006d0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tinstop.com](https://www.zero.xyz/host/tinstop.com/llms.txt)