{"uid":"cap_c7ZKeaMECwZG2i6bv6iZp","slug":"17711-domain-security-check-56df2fa5","name":"17711 Domain Security Check","description":"Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score","url":"https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"The domain to assess: `stripe.com`, `www.stripe.com` or a full URL (only the host is used)."},"max_age_seconds":{"type":["integer","null"],"format":"uint64","default":null,"minimum":0,"description":"The oldest report you accept, in seconds. Omit it for the default (reports up to 1 hour old);\n`0` forces a fresh assessment. The response always says how old it is."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.009","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.009/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_BmK95uXGXfLnTmECiTErC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Assesses a domain's security posture by checking SSL certificates, DMARC/SPF records, DNSSEC, HTTP security headers, and blocklist status, returning a composite security score.","exampleAgentPrompt":"Can you run a full security check on stripe.com and tell me how it scores on SSL, DMARC, SPF, DNSSEC, security headers, and blocklist status?","exampleUseCases":[{"title":"Vendor security vetting before onboarding","prompt":"Before we onboard this new vendor, can you check the security posture of their domain acmecorp.com — I need to know if their SSL is valid, whether they have DMARC and SPF set up, and if they appear on any blocklists?"},{"title":"Email deliverability and spoofing risk audit","prompt":"We've been having email deliverability issues — can you check if newsletter.mybrand.com has proper DMARC and SPF records configured and give me an overall security score?"},{"title":"Monitoring a competitor or phishing lookalike domain","prompt":"Someone registered stripe-secure.com and I'm worried it might be a phishing site — can you run a domain security check on it to see its SSL status, blocklist flags, and whether it has any legitimate email security records?"}],"resultDescription":"Returns a structured security report for the specified domain including: SSL certificate validity and details, DMARC record presence and policy, SPF record configuration, DNSSEC status, HTTP security headers analysis, blocklist membership status, report age in seconds, and a composite numerical security score summarizing the overall domain security posture.","failureModes":["Domain does not exist or is unresolvable — report may return errors for DNS-dependent checks","SSL certificate check may time out for very slow or unreachable domains","Blocklist data may be stale if cached report is used (use max_age_seconds=0 to force fresh assessment)","Invalid domain format input returns a validation error","Some security headers can only be checked if the domain serves HTTP/HTTPS traffic"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-signal domain security assessment in a single call — covering SSL, email authentication (DMARC/SPF), DNSSEC, security headers, and blocklist status together with a unified score. Prefer it over individual DNS lookup or SSL checking tools when you want a holistic security snapshot for vendor vetting, phishing domain investigation, or compliance checks. The caching mechanism (max_age_seconds) makes it efficient for repeated checks without redundant cost.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:37:10.779Z","isFirstParty":false,"canonicalSlug":"17711-domain-security-check-56df2fa5"}