{"uid":"cap_coIm-4YIfY0qxFVMktV2N","slug":"orioncmd-domain-grade-24108ece","name":"OrionCMD Domain Grade","description":"OrionCMD Checks: Domain security grade A-F with a per-category breakdown. Runs the cert, DNS, expiry, email-auth and security-header checks and scores them: TLS 25, email auth 25, HTTP headers 20, DNS (resolves, DNSSEC, CAA) 15, registration expiry 15. Returns one A-F letter, a 0-100 score, each category's points and notes, and the top fixes. Unlike /v1/site-health (raw cert/DNS/expiry data, no grade), this is a graded scorecard that also covers email auth and headers.","url":"https://api.orioncmd.com/v1/domain-grade?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Hostname or URL, e.g. example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_LMNZ-85ZyjTVlvvAJAUl7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns an A-F security grade and 0-100 score for a domain, with per-category breakdowns across TLS, email auth, HTTP headers, DNS, and registration expiry.","exampleAgentPrompt":"Can you run a security grade check on mybusiness.com and tell me its overall A-F score, how it breaks down across TLS, email auth, headers, DNS, and expiry, and what the top fixes are?","exampleUseCases":[{"title":"Pre-launch security audit","prompt":"Before we launch the new product site at launchpad.example.com, can you run an OrionCMD domain grade check and tell me the overall grade plus any categories that are failing or below average?"},{"title":"Client security report","prompt":"I need to send my client a security overview for clientdomain.io — can you get the A-F domain grade with a breakdown of TLS, email auth, HTTP headers, DNS, and expiry scores, and list the top recommended fixes?"},{"title":"Monitoring security regression","prompt":"We made some DNS and header changes to acmecorp.com last week — can you pull the domain grade scorecard now so I can see if the score improved compared to what we had before?"}],"resultDescription":"Returns a letter grade (A-F), a numeric score from 0-100, and per-category scores with notes: TLS (up to 25 pts), email authentication (up to 25 pts), HTTP security headers (up to 20 pts), DNS health including DNSSEC and CAA (up to 15 pts), and domain registration expiry (up to 15 pts). Also includes a prioritized list of the top recommended fixes.","failureModes":["Domain does not resolve — DNS lookup failure, returns error or low score with notes","Invalid or malformed domain input — API may return a 400 or validation error","Domain is unreachable or times out — partial score returned with missing category data","Rate limiting or payment failure — 402 or 429 response if x402 payment is not processed","Private/internal domain — may return incomplete data for non-public hostnames"],"whenToPreferThis":"Choose this endpoint when you need a summarized, graded security assessment of a domain rather than raw certificate or DNS data. It is the right choice when you want a human-readable A-F scorecard covering TLS, email auth (SPF/DKIM/DMARC), security headers, DNS hygiene, and expiry all in one call. Prefer /v1/site-health instead if you only need raw cert or DNS data without scoring. This endpoint is best for audits, client reports, compliance checks, or any workflow that needs actionable prioritized fixes.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:35:01.096Z","isFirstParty":false,"canonicalSlug":"orioncmd-domain-grade-24108ece"}