# Services from api.lookproof.dev on Zero

> api.lookproof.dev serves 47 paid API services for AI agents, indexed by Zero. Each is callable per call with payment handled by Zero.

Canonical page: https://www.zero.xyz/host/api.lookproof.dev
Live health (JSON, refreshed every minute): https://www.zero.xyz/host/api.lookproof.dev/health.json

## Services

- [Lookproof HTTP Security Headers Checker](https://www.zero.xyz/c/lookproof-http-security-headers-checker-6d39f5bb/llms.txt): $0.01/call via x402. Follows a domain's HTTP-to-HTTPS redirect chain and inspects the security headers of the final HTTPS response, including HSTS, CSP, X-Content-Type-Options, framing, Referrer-Policy, and cookie flags.
- [Lookproof PEM Certificate Decoder](https://www.zero.xyz/c/lookproof-pem-certificate-decoder-0907d010/llms.txt): $0.002/call via x402. Decodes a PEM-encoded X.509 certificate offline, returning subject, issuer, validity, SANs, key info, signature algorithm, CA flag, key usages, self-signed status, and SHA-256/SHA-1 fingerprints.
- [Lookproof MTA-STS Policy Parser](https://www.zero.xyz/c/lookproof-mta-sts-policy-parser-da31cf89/llms.txt): $0.002/call via x402. Parses and validates a pasted MTA-STS policy file (RFC 8461) offline, checking version, mode, MX patterns, max_age, and flagging non-conforming lines or risky settings.
- [Lookproof DMARC Record Parser](https://www.zero.xyz/c/lookproof-dmarc-record-parser-d3588545/llms.txt): $0.002/call via x402. Parses and validates a raw DMARC TXT record string offline (no DNS lookup), extracting all tags and returning structured findings with coded diagnostics.
- [Lookproof Site Health Check](https://www.zero.xyz/c/lookproof-site-health-check-8a9554ab/llms.txt): $0.025/call via x402. Runs a consolidated website security audit covering TLS certificate, HTTP redirect chains, security headers (HSTS, CSP, framing, Referrer-Policy, cookies), and domain registration status in a single call.
- [Lookproof PTR / FCrDNS Mail Server Check](https://www.zero.xyz/c/lookproof-ptr-fcrdns-mail-server-check-18365b90/llms.txt): $0.01/call via x402. Checks reverse DNS (PTR records) for a domain's MX hosts and validates full-circle reverse DNS (FCrDNS) for each mail server IP address
- [Lookproof CSR Decode](https://www.zero.xyz/c/lookproof-csr-decode-1635db55/llms.txt): $0.002/call via x402. Parses and validates a PEM-encoded PKCS#10 certificate signing request, returning subject, SANs, key type/size, and signature validity — fully offline.
- [Lookproof Mail Provider Identifier](https://www.zero.xyz/c/lookproof-mail-provider-identifier-64d554a5/llms.txt): $0.005/call via x402. Identifies the mail hosting provider and email sending services for a domain by analyzing its MX records and SPF include tree
- [Lookproof MTA-STS Checker](https://www.zero.xyz/c/lookproof-mta-sts-checker-a66f4c17/llms.txt): $0.02/call via x402. Checks a domain's full MTA-STS setup (RFC 8461) including DNS record, HTTPS policy file, certificate validity, MX coverage, mode, max_age, and TLS-RPT record (RFC 8460)
- [Lookproof DKIM Selector Discovery](https://www.zero.xyz/c/lookproof-dkim-selector-discovery-31cfe3c0/llms.txt): $0.02/call via x402. Probes 27 common DKIM selectors for a domain and validates each found key's type, size, revocation status, and testing flag
- [Lookproof SPF Flatten](https://www.zero.xyz/c/lookproof-spf-flatten-b23d8883/llms.txt): $0.01/call via x402. Unfolds and flattens a domain's full SPF policy into merged IPv4/IPv6 CIDR blocks by recursively following includes and redirects per RFC 7208 lookup limits
- [Lookproof CSP Parser](https://www.zero.xyz/c/lookproof-csp-parser-d7a1855c/llms.txt): $0.002/call via x402. Parses a Content-Security-Policy header value offline, identifying directives, sources, unsafe flags, wildcards, and missing critical entries per CSP Level 3.
- [Lookproof DNS Zone File Linter](https://www.zero.xyz/c/lookproof-dns-zone-file-linter-9f20d7e2/llms.txt): $0.002/call via x402. Validates a pasted DNS zone file (RFC 1035 master format) for syntax errors, structural issues, and common misconfigurations before loading
- [Lookproof HTTPS RR Lookup](https://www.zero.xyz/c/lookproof-https-rr-lookup-ebeb9aa5/llms.txt): $0.01/call via x402. Reads and parses HTTPS DNS records (RFC 9460 SVCB) for a domain, returning priority, target, AliasMode/ServiceMode, ALPN protocols, port, IP hints, and ECH publication status.
- [Lookproof IDN Validator](https://www.zero.xyz/c/lookproof-idn-validator-452697f2/llms.txt): $0.002/call via x402. Convert a domain name between Unicode and punycode (ACE/A-label) and validate it against IDNA2008, UTS 46, bidi, context, hyphen, and mixed-script homograph rules per label
- [Lookproof SPF Record Analyzer](https://www.zero.xyz/c/lookproof-spf-record-analyzer-4b864499/llms.txt): $0.01/call via x402. Parses and evaluates a domain's SPF record, tracing the full include/redirect tree, validating qualifiers, and checking against the RFC 7208 10-lookup limit with coded diagnostic findings.
- [Lookproof BIMI Record Checker](https://www.zero.xyz/c/lookproof-bimi-record-checker-4c4cccd5/llms.txt): $0.01/call via x402. Validates a domain's BIMI record syntax, logo URL, certificate URL, and DMARC enforcement status to diagnose why brand logos don't appear in email clients
- [Lookproof Domain RDAP Lookup](https://www.zero.xyz/c/lookproof-domain-rdap-lookup-7b6c5260/llms.txt): $0.01/call via x402. Retrieves domain registration details via RDAP (RFC 9083) including registrar, dates, EPP statuses, nameservers, and DNSSEC info — no contact data returned.
- [Lookproof DNSSEC Validator](https://www.zero.xyz/c/lookproof-dnssec-validator-7e33d495/llms.txt): $0.01/call via x402. Reports the DNSSEC validation status of a domain (secure, insecure, bogus, or unknown) including DS/DNSKEY algorithms, deprecated algorithms, SHA-1 digests, and broken chain-of-trust detection.
- [Lookproof CAA Record Lookup](https://www.zero.xyz/c/lookproof-caa-record-lookup-38b27264/llms.txt): $0.01/call via x402. Evaluate a domain's CAA (Certification Authority Authorization) DNS records, climbing to parent domains if needed, to determine which CAs may issue certificates and why certificate requests may be refused.
- [Lookproof HSTS Header Parser](https://www.zero.xyz/c/lookproof-hsts-header-parser-ac32a3de/llms.txt): $0.002/call via x402. Parses a Strict-Transport-Security (HSTS) header value per RFC 6797, returning max-age, includeSubDomains, preload flags, and hstspreload.org rule compliance — offline, no DNS required.
- [Lookproof TLS Certificate Checker](https://www.zero.xyz/c/lookproof-tls-certificate-checker-22efedc5/llms.txt): $0.01/call via x402. Checks the TLS certificate served on port 443 for a domain, returning chain trust, name match, expiry, issuer, key/signature algorithms, TLS version, and coded findings.
- [Lookproof DMARC Lookup](https://www.zero.xyz/c/lookproof-dmarc-lookup-6e9cbfab/llms.txt): $0.01/call via x402. Looks up and explains the DMARC record of a domain (or its organisational domain), returning policy, subdomain policy, alignment modes, reporting addresses, and coded findings about spoofing protection.
- [Lookproof DMARC Spoofability Check](https://www.zero.xyz/c/lookproof-dmarc-spoofability-check-1e9198b5/llms.txt): $0.01/call via x402. Returns how strongly a domain's DMARC policy asks receivers to act on mail that fails authentication, including effective policy, subdomain policy, pct, SPF all-qualifier, and plaintext gap explanations.
- [Lookproof Domain Email & DNS Security Health Check](https://www.zero.xyz/c/lookproof-domain-email-dns-security-health-check-2165fbad/llms.txt): $0.08/call via x402. Returns a comprehensive single-call audit of a domain's email and DNS security posture, covering MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DNSSEC, reverse DNS, BIMI, and CAA records with coded findings per section.
- [Lookproof DKIM Public Key Validator](https://www.zero.xyz/c/lookproof-dkim-public-key-validator-39762cfc/llms.txt): $0.01/call via x402. Fetches and validates the DKIM public key DNS record for a given domain and selector, checking key type, size, revocation status, and syntax with coded findings.
- [Lookproof IP Address Info](https://www.zero.xyz/c/lookproof-ip-address-info-1e942fed/llms.txt): $0.002/call via x402. Classifies an IPv4 or IPv6 address against IANA special-purpose registries, returning its category, RFC reference, compressed/expanded forms, reverse DNS name, and IPv4-mapped form — all computed offline.
- [Lookproof Cookie Header Parser](https://www.zero.xyz/c/lookproof-cookie-header-parser-ca194266/llms.txt): $0.002/call via x402. Parses a raw Set-Cookie header string according to RFC 6265bis, validating Secure, HttpOnly, SameSite, Partitioned, __Host- and __Secure- prefixes, Domain, Path, Expires, and Max-Age (with the 400-day cap), returning attribute analysis but never the cookie value itself.
- [Lookproof DNS Lookup](https://www.zero.xyz/c/lookproof-dns-lookup-8499126c/llms.txt): $0.005/call via x402. Resolve one or more DNS record types for a domain name through public resolvers, returning the answer, TTL, observation time, and which resolver responded.
- [Lookproof DNS TXT Verification Token Listing](https://www.zero.xyz/c/lookproof-dns-txt-verification-token-listing-15b3526b/llms.txt): $0.01/call via x402. Lists all domain verification tokens found in a domain's apex TXT records, identifying services like Google, Microsoft, Atlassian, Facebook, Apple, Adobe, DocuSign, and Stripe.
- [Lookproof DNS Resolver Comparison](https://www.zero.xyz/c/lookproof-dns-resolver-comparison-d17c3726/llms.txt): $0.01/call via x402. Queries the same DNS name and record type against both Cloudflare and Google resolvers independently (uncached) and compares their response codes and records to surface propagation issues or resolver-specific discrepancies.
- [Lookproof Mail Check](https://www.zero.xyz/c/lookproof-mail-check-c166e5e4/llms.txt): $0.03/call via x402. Returns a consolidated email authentication report for a domain covering MX, SPF, DMARC, and optionally DKIM records in a single API call.
- [Lookproof DNS Wildcard Detector](https://www.zero.xyz/c/lookproof-dns-wildcard-detector-e3c0e356/llms.txt): $0.01/call via x402. Checks whether a DNS zone has a wildcard record (RFC 4592) by querying A, AAAA, TXT, and MX types for a random uncached subdomain, with a warning if wildcard MX accepts mail for invented subdomains.
- [Lookproof MX Record Lookup](https://www.zero.xyz/c/lookproof-mx-record-lookup-45ea99ba/llms.txt): $0.01/call via x402. Lists a domain's mail servers in priority order and detects null MX (RFC 7505) or unresolvable MX targets, with coded diagnostic findings.
- [Lookproof Bulk Mail Configuration Checker](https://www.zero.xyz/c/lookproof-bulk-mail-configuration-checker-07efc2ff/llms.txt): $0.03/call via x402. Checks MX, SPF, and DMARC configuration for up to 20 domains in a single request, returning ordered results with retry tokens for failed checks.
- [Lookproof TLS-RPT Record Checker](https://www.zero.xyz/c/lookproof-tls-rpt-record-checker-ed492581/llms.txt): $0.01/call via x402. Checks a domain's TLS-RPT DNS record (_smtp._tls TXT) for RFC 8460 compliance, validating the v=TLSRPTv1 version tag and rua report address format.
- [Lookproof BIMI Record Parser](https://www.zero.xyz/c/lookproof-bimi-record-parser-091fc4e6/llms.txt): $0.002/call via x402. Parses and validates a raw BIMI DNS record string offline, extracting and checking the version, logo URL, and authority certificate tags without fetching external resources.
- [Lookproof TLS-RPT Record Parser](https://www.zero.xyz/c/lookproof-tls-rpt-record-parser-059f92aa/llms.txt): $0.002/call via x402. Parses a pasted TLS-RPT DNS record (RFC 8460) offline, validating the version tag, extracting the rua field, and classifying each reporting URI as mailto: or https:.
- [Lookproof IP-in-CIDR Containment Check](https://www.zero.xyz/c/lookproof-ip-in-cidr-containment-check-9165aa10/llms.txt): $0.002/call via x402. Checks whether a single IPv4 or IPv6 address falls within any of up to 100 CIDR blocks, returning per-block match results and the list of matching blocks.
- [Lookproof CIDR Subnet Splitter](https://www.zero.xyz/c/lookproof-cidr-subnet-splitter-0ac2fe15/llms.txt): $0.002/call via x402. Splits an IPv4 or IPv6 CIDR block into equal subnets of a specified longer prefix, returning up to 256 subnets in order
- [Lookproof DNS TTL Lookup](https://www.zero.xyz/c/lookproof-dns-ttl-lookup-1e4e1998/llms.txt): $0.01/call via x402. Returns the TTL of A, AAAA, MX, NS, TXT, CAA, and SOA records for a domain, sourced from DNSSEC-validated signatures or resolver cache, plus SOA negative caching TTL.
- [Lookproof SPF Record Parser](https://www.zero.xyz/c/lookproof-spf-record-parser-a869b853/llms.txt): $0.002/call via x402. Parses a raw SPF record string (without DNS) into mechanisms, qualifiers, modifiers, syntax errors, the 'all' policy, and DNS lookup count with coded findings per RFC 7208.
- [Lookproof DNS NS Checker](https://www.zero.xyz/c/lookproof-dns-ns-checker-a640e262/llms.txt): $0.01/call via x402. Retrieves and analyzes a domain's name server set, including NS records, IPv4/IPv6 addresses for up to eight servers, glue record needs, and DNS redundancy information.
- [Lookproof CIDR Block Calculator](https://www.zero.xyz/c/lookproof-cidr-block-calculator-294433da/llms.txt): $0.002/call via x402. Computes full CIDR block details (network address, first/last host, address count, netmask, host mask, and host-bits-set flag) for any IPv4 or IPv6 CIDR notation input, entirely offline.
- [Lookproof NS Provider Lookup](https://www.zero.xyz/c/lookproof-ns-provider-lookup-c3a80128/llms.txt): $0.01/call via x402. Identifies which DNS hosting provider (Cloudflare, Route 53, Azure DNS, Google Cloud DNS, etc.) is managing a domain's name servers by matching its NS records against a versioned pattern list.
- [Lookproof DNS SOA Record Checker](https://www.zero.xyz/c/lookproof-dns-soa-record-checker-7a1e13f4/llms.txt): $0.01/call via x402. Retrieves and validates a domain's SOA record through public resolvers, checking primary server, contact, serial, and all zone transfer timers against RFC 1912 and RFC 2308.
- [Lookproof IP Range to CIDR Converter](https://www.zero.xyz/c/lookproof-ip-range-to-cidr-converter-543fd97b/llms.txt): $0.002/call via x402. Converts a start and end IPv4 or IPv6 address into the minimal list of CIDR blocks that exactly covers that range.

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

- [Zero catalog index](https://www.zero.xyz/llms.txt)