{"uid":"cap_-4yVI48YqBy3Gxse9KrWk","slug":"data-agent-foundry-domain-host-trust-3eac8e05","name":"DATA/AGENT FOUNDRY — Domain Host Trust","description":"Machine-first active product portfolio. Lifecycle is the CONTROL_SKU; UNKNOWN and DATA GAP results are not billable.","url":"https://foundry-api-production-95ae.up.railway.app/v1/domain-host-trust?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"hostname":{"type":"string","example":"example.org","maxLength":253,"minLength":1,"description":"Public DNS hostname only; URLs, ports, paths and IP literals are rejected."},"schema_version":{"const":"1.0"},"client_request_id":{"type":"string","maxLength":200,"minLength":1}}},"responseSchema":{"type":"json","example":{"rights":{"state":"GREEN_SELF_OBSERVED_PROTOCOL_FACTS","whois_bulk_content":false,"third_party_reputation_feed":false},"run_id":"run_domain_example","decision":{"state":"UNKNOWN","reasons":["OBSERVATION_UNAVAILABLE"]},"hostname":"example.org","metering":{"unit":"domain_host_trust_record","billable":false,"quantity":0},"freshness":{"state":"FRESH","observed_at":"2026-09-30T20:00:00.000Z","max_age_seconds":300},"commercial":{"pricing_version":"domain-host-trust-v1"},"product_id":"foundry.domain-host-trust-record.v1","provenance":[],"request_id":"req_domain_example","observed_at":"2026-09-30T20:00:00.000Z","result_state":"UNKNOWN","dns_resolution":{"addresses":[],"dnssec_state":"UNKNOWN_NOT_OBSERVED"},"schema_version":"1.0","client_request_id":null,"http_security_headers":{"state":"UNKNOWN","present":{}},"tls_certificate_validity":{"state":"UNKNOWN"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_dddKIJImxD7i46u9GdEZt","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks the real-time trustworthiness of a public DNS hostname by observing DNS resolution, TLS certificate validity, HTTP security headers, and DNSSEC state.","exampleAgentPrompt":"Can you check the domain trust status for stripe.com — I want to know if it has valid TLS, DNSSEC, and proper HTTP security headers before we integrate it?","exampleUseCases":[{"title":"Pre-integration domain vetting","prompt":"Before we start sending user data to payments.acme-partner.com, can you run a trust check on that hostname and tell me if its TLS cert is valid and whether it has DNSSEC enabled?"},{"title":"Phishing domain investigation","prompt":"I got a suspicious email linking to secure-login-bankofamerica.xyz — can you check that hostname's trust profile and tell me if it resolves, has valid TLS, and what its security headers look like?"},{"title":"Continuous third-party supply chain monitoring","prompt":"We use cdn.thirdparty-vendor.io to serve assets — can you pull the current trust record for that hostname and flag if anything looks off with its certificate or DNS resolution?"}],"resultDescription":"Returns a JSON object containing: a trust decision state (e.g. UNKNOWN, GREEN), DNS resolution addresses and DNSSEC state, TLS certificate validity state, HTTP security headers presence map, freshness metadata (observed_at timestamp, max_age_seconds), billability flag and quantity, provenance list, and a unique run_id and request_id. UNKNOWN and DATA_GAP results are not billed.","failureModes":["Hostname rejected if it contains URLs, ports, paths, or IP literals (validation error returned)","Result state UNKNOWN if the host cannot be observed or is unreachable","DATA_GAP result if observations are incomplete — neither billable","DNSSEC state returns UNKNOWN_NOT_OBSERVED if DNSSEC data was not collected","TLS and HTTP header states return UNKNOWN if the host did not respond over HTTPS"],"whenToPreferThis":"Choose this endpoint when you need a real-time, machine-readable trust signal about a specific public hostname — especially for pre-integration vetting, phishing domain triage, or supply chain monitoring. It is uniquely structured for agent-driven workflows: UNKNOWN and DATA_GAP results are free, making it safe to probe speculatively. Prefer it over passive WHOIS lookups when you need active observations (TLS, DNS resolution, security headers) rather than registration metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T06:38:30.559Z","isFirstParty":false,"canonicalSlug":"data-agent-foundry-domain-host-trust-3eac8e05"}