{"uid":"cap_hqf0Bec3FyITe4yqKfM4t","slug":"domain-trust-preflight-check-ae51dea2","name":"Domain Trust Preflight Check","description":"Inspect public DNS, DNSSEC, mail, CNAME resolution, RDAP registration age, expiration, and domain trust signals.","url":"https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/web/domain-trust-preflight?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","example":"github.com","pattern":"^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\\.)+[A-Za-z]{2,63}$","maxLength":253,"description":"Registrable or delegated public DNS domain name."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","x-schema-family":"STRUCTURED_PRODUCT_RESULT","x-schema-authority":"STRUCTURED_PRODUCT_RESULT","additionalProperties":true}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.015001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Rf-4Wuv2bZOxCLRnm3lA6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.015001","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Inspects a domain's DNS, DNSSEC, mail configuration, CNAME resolution, RDAP registration age/expiration, and overall trust signals before agent interactions.","exampleAgentPrompt":"Before my agent pays for that API, can you run a domain trust preflight on api.example.com — check its DNS, DNSSEC, mail records, CNAME resolution, and RDAP registration age and expiration to see if it looks legitimate?","exampleUseCases":[{"title":"Pre-payment domain legitimacy check","prompt":"Before my agent sends USDC to that new API service at payments.newservice.io, can you check its domain trust signals — DNS records, DNSSEC, how old the registration is, and when it expires — so I know it's not a freshly registered phishing domain?"},{"title":"Vendor API domain vetting","prompt":"I want to integrate with a third-party vendor at api.vendorexample.com — can you do a trust preflight on that domain and tell me if the DNS, DNSSEC, and mail configuration all look healthy and the domain is well-established?"},{"title":"Suspicious domain investigation","prompt":"Someone just emailed me from support@quickpay-agents.net and I'm not sure if it's legit — can you inspect that domain's public DNS, RDAP registration age, DNSSEC status, and mail records to give me a sense of whether it's trustworthy?"}],"resultDescription":"Returns a structured report of the domain's public DNS records, DNSSEC validation status, mail (MX/SPF/DKIM/DMARC) configuration, CNAME resolution chain, RDAP registration date and expiration, and aggregated trust signals indicating whether the domain appears legitimate and well-maintained.","failureModes":["Domain does not exist or is unresolvable — returns error or empty DNS results","RDAP lookup unavailable for certain TLDs — registration age may be missing","DNSSEC not configured on domain — reported as absent, not as a lookup failure","Rate limiting or upstream DNS resolver timeouts — may return partial results","Invalid or malformed domain input — returns validation error"],"whenToPreferThis":"Use this endpoint as a preflight step whenever an agent is about to interact with, pay, or integrate with an unfamiliar domain. It is especially valuable before x402 payments, API integrations, or responding to inbound agent communications from unknown senders. Prefer this over generic WHOIS tools when you need a combined view of DNS health, DNSSEC, mail configuration, and RDAP registration age in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T18:33:29.845Z","isFirstParty":false,"canonicalSlug":"domain-trust-preflight-check-ae51dea2"}