# Toolsmith Domain Due-Diligence Check

> Toolsmith Domain Due-Diligence Check is a paid API for AI agents from toolsmith-api.dassad10.workers.dev, paid per call via x402, $0.008/call, status unknown (last checked 2026-09-13).

Performs a comprehensive due-diligence check on any domain, returning registration age, registrar, DNS records, SPF/DMARC presence, SSL history, and risk flags in a single JSON verdict.

## Facts

- Endpoint: GET https://toolsmith-api.dassad10.workers.dev/t/domain/check
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/toolsmith-domain-due-diligence-check-cfc6429a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_W0hSMeR1T1zm3LBdP91eK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability toolsmith-domain-due-diligence-check-cfc6429a
```

Example prompt: Run a full due-diligence check on suspiciousdomain.xyz — I need to know how old it is, who registered it, whether it has proper DNS and mail setup (SPF/DMARC), its SSL history, and any red flags.

## When to prefer this

Use this endpoint when you need a consolidated, one-call domain risk profile — especially useful for fraud detection, vendor vetting, phishing investigation, or evaluating unfamiliar sender domains. Prefer this over individual DNS or WHOIS lookups when you want SPF, DMARC, SSL, registration age, and risk flags all in one response without stitching together multiple tools.

## Known failure modes

- Invalid or malformed domain name returns an error
- Domain not found in RDAP (unregistered or unsupported TLD) may return partial data
- DNS lookup timeout results in incomplete DNS posture data
- Private or redacted RDAP records may limit registrar/age data
- Rate limiting or payment failure returns a 402 error

## How this service works

Due-diligence check on any domain: registration age via RDAP, registrar, DNS posture (A/MX/NS), SPF and DMARC presence, SSL certificate history, and risk flags like newly-registered or no-mail-setup. One call, one JSON verdict. $0.008 USDC per call, pay via x402, no API key.

## Output

A single JSON object containing: domain registration age and registrar (via RDAP), DNS posture including A, MX, and NS records, presence or absence of SPF and DMARC records, SSL certificate history, and risk flags such as 'newly-registered' or 'no-mail-setup'.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain to check, e.g. example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "flags": [
   "no_mx"
  ],
  "hasMx": false,
  "domain": "example.com",
  "hasSpf": true,
  "ageDays": 10561,
  "hasDmarc": false,
  "registrar": "IANA",
  "trustScore": 72
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/toolsmith-domain-due-diligence-check-cfc6429a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from toolsmith-api.dassad10.workers.dev](https://www.zero.xyz/host/toolsmith-api.dassad10.workers.dev/llms.txt)