{"uid":"cap_VTOV0of0WTxOnT9xaOlhZ","slug":"shield-vainplex-dev-9a5bfa34","name":"ShieldAPI Full Security Scan","description":"ShieldAPI - x402 security preflight for high-risk agent payment, trust, or connection decisions","url":"https://shield.vainplex.dev/api/cdp/full/scan","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"target":{"type":"string","description":"Domain, URL, IP, or Email to perform a full composite scan against"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"target":"example.com"}}},"response":{"checks":{"domain":{"dns":{"a":["104.20.23.154","172.66.147.243"],"mx":[{"exchange":"","priority":0}],"ns":["hera.ns.cloudflare.com","elliott.ns.cloudflare.com"],"txt":[["_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"],["v=spf1 -all"]],"has_spf":true,"has_dmarc":true,"has_records":true},"ssl":{"valid":true,"status":200},"domain":"example.com","blacklists":[{"list":"zen.spamhaus.org","note":"resolver-error-code","listed":false},{"list":"bl.spamcop.net","listed":false},{"list":"dnsbl.sorbs.net","listed":false}],"risk_level":"low","risk_score":0}},"inputs":{"domain":"example.com"},"target":"example.com","scan_id":"scan-1781757823329","summary":["✅ No significant threats detected"],"timestamp":"2026-06-18T04:43:43.329Z","checks_failed":0,"checks_completed":1,"overall_risk_level":"low","overall_risk_score":0}},"exampleRequest":{"target":"example.com"},"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EuLpv4qyhqj1i7-p6kyrC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive composite security scan on a domain, URL, IP, or email — combining DNS, SSL, blacklist, and reputation checks into a single risk assessment","exampleAgentPrompt":"Run a full security scan on example.com — I want to know its DNS records, SSL status, blacklist standing, and overall risk level all in one shot.","exampleUseCases":[{"title":"Pre-approve vendor before payment","prompt":"Before we process this payment to vendor-supplies.io, run a full security scan on them — I need to know if they're blacklisted, their SSL status, and overall risk level so we don't get compromised."},{"title":"Validate email sender domain safety","prompt":"I'm getting emails from a new partner domain — can you scan it for me? Check their DNS records, SPF/DMARC setup, and whether they're flagged on any spam blacklists so I know if it's legit."},{"title":"Vet unknown link before access","prompt":"Someone sent me a link to a domain I don't recognize — run a comprehensive security scan on it and give me the overall risk score, blacklist status, and SSL validity so I know if it's safe to click."}],"resultDescription":"Returns a structured scan report including: DNS records (A, MX, NS, TXT), SPF/DMARC presence, SSL validity and HTTP status, blacklist checks across multiple DNSBL providers (Spamhaus, SpamCop, SORBS), per-check risk scores, an overall risk level (low/medium/high), a risk score, and a human-readable summary of findings — all grouped under a unique scan_id with timestamp.","failureModes":["Invalid or unresolvable target returns an error or empty DNS results","Target IP/domain not reachable may result in partial check completion","Blacklist DNS resolver errors may mark individual list checks as resolver-error-code rather than listed/unlisted","Missing required 'target' query parameter returns a 400-level error","Rate limiting or payment failure returns a 402 Payment Required response"],"whenToPreferThis":"Use this endpoint when you need a holistic security assessment of a target in a single API call rather than calling individual checks (DNS, SSL, blacklist, reputation) separately. Ideal for agent-driven security triage, pre-flight checks before interacting with unknown domains, or building security dashboards that need combined risk signals. Prefer this over the individual ShieldAPI endpoints when breadth matters more than depth on any single check.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T00:31:20.566Z","isFirstParty":false}