{"uid":"cap_en76DiTNfLcDM6_lKSZmt","slug":"relayshield-campaign-scan-3b261a4d","name":"RelayShield Campaign Scan","description":"Identity security, threat monitoring and intelligence for the agentic AI era. TAP verifier for agentic commerce, MCP Proxy Firewall for AI agents, and threat intelligence APIs backed by 725K indicators across 129 monitored marketplaces.","url":"https://api.relayshield.net/v1/payg/campaign-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"urls":{"type":"array","items":{"type":"string"}},"emails":{"type":"array","items":{"type":"string"}},"phones":{"type":"array","items":{"type":"string"}},"domains":{"type":"array","items":{"type":"string"}},"wallets":{"type":"array","items":{"type":"string"}},"file_urls":{"type":"array","items":{"type":"string"}},"campaign_name":{"type":"string","description":"Optional label for the campaign"},"fingerprint_ids":{"type":"array","items":{"type":"string"}}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"campaign_id":"cmp_1a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8","kit_families":["parcel-smish-eu-04"],"aggregate_risk":72,"indicators_scanned":2}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"5.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$5.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"5.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"5.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EhiCTHdQgf5Tc0QFXEOta","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"5.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a batch of URLs, emails, phones, domains, wallets, and file URLs against 725K threat indicators to assess phishing/smishing campaign risk and identify kit families","exampleAgentPrompt":"Can you scan these indicators for me — URLs like https://parcel-track.eu/xyz, the email alerts@parcel-notif.com, phone +441234567890, and domain parcel-notif.com — and tell me if they belong to any known phishing kit family and what the aggregate risk score is? Label it 'EU Parcel Smishing Check'.","exampleUseCases":[{"title":"Phishing campaign triage for SOC team","prompt":"We got a report of a potential smishing campaign — can you scan these three URLs, two phone numbers (+14155550123, +14155550456), and the domain fake-bank-alert.com and tell me if they match any known phishing kit families and what the risk score is? Call the campaign 'Bank Alert Smish Q3'."},{"title":"Agentic commerce threat screening","prompt":"Before my AI agent processes any of these inbound payment requests, can you check these wallet addresses and URLs against your threat intelligence database to see if any are flagged as fraudulent and give me an aggregate risk score?"},{"title":"Dark web IOC verification for fraud team","prompt":"I have a list of email addresses and domains from a suspected fraud ring — can you run them through RelayShield's campaign scan against your dark web marketplace indicators and tell me if they match any known threat actors or kit families?"}],"resultDescription":"Returns a JSON object with a campaign ID, a list of identified phishing/smishing kit family names, an aggregate risk score (0-100), and the count of indicators scanned. A higher aggregate risk score indicates greater threat likelihood.","failureModes":["Empty or invalid indicator arrays may return a scan with zero indicators and no kit families","Unresolvable file URLs may be skipped or return partial results","Malformed email/phone/domain formats may not match against indicators","Rate limits or payment failures return non-200 HTTP errors","Indicators not in the 725K database return low/zero risk scores even if malicious"],"whenToPreferThis":"Use this endpoint when you need to scan multiple heterogeneous indicators (URLs, emails, phones, domains, wallets) as a unified campaign in a single call and get a risk score plus kit family attribution. Prefer this over single-indicator lookups when assessing coordinated phishing or smishing campaigns, or when you need dark web marketplace-backed threat intelligence across 129 monitored sources.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T12:43:27.370Z","isFirstParty":false,"canonicalSlug":"relayshield-campaign-scan-3b261a4d"}