{"uid":"cap_mbfuHyQ1MZdsjVc35srQa","slug":"lion-domain-intelligence-dns-tls-http-trust-analysis-577d38d7","name":"LION Domain Intelligence - DNS, TLS, HTTP & Trust Analysis","description":"Keyless off-chain and on-chain data for AI agents. No API key, no signup - payment is the only gate. Pay-per-call in USDC on Base via x402.","url":"https://lion-x402.lionmaster-operations.workers.dev/api/x402/domain-intel-json","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"dns":{"a":["34.111.0.0"],"mx":["aspmx.l.google.com"],"ns":["ns-1.example.net"],"aaaa":[],"has_spf":true,"has_dmarc":true,"txt_count":4},"tls":{"issuer":"Let's Encrypt","not_after":"2026-08-01T00:00:00Z","days_to_expiry":59},"http":{"server":"nginx","status":200,"security":{"csp":true,"hsts":true,"x_frame":true,"x_content_type":true},"powered_by":null,"https_enforced":true},"as_of":"2026-06-03T00:00:00.000Z","domain":"stripe.com","asset_id":"LION_DOMAIN_INTEL_001","resolved":true,"confidence":0.9,"tech_hints":["nginx","hsts"],"trust_score":0.92,"trust_signals":{"has_mx":true,"has_spf":true,"has_dmarc":true,"valid_tls":true,"https_enforced":true}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_1n9iRQXxLcfvH6f4uLaWB","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns comprehensive domain intelligence including DNS records, TLS certificate details, HTTP security headers, and a computed trust score for any given domain.","exampleAgentPrompt":"Can you pull up the full domain intelligence for stripe.com — I want to see the DNS records, TLS expiry, whether it enforces HTTPS, and what trust score it gets?","exampleUseCases":[{"title":"Phishing detection before email campaign","prompt":"Before we send outreach emails to this vendor list, can you check the domain trust scores and verify they all have proper DMARC and SPF configured? I want to make sure we're not accidentally emailing spoofed or compromised domains."},{"title":"Validate partner infrastructure security","prompt":"We're considering integrating with this third-party API provider. Can you pull their domain intelligence — check their TLS certificate expiry, see what security headers they're running, and give me their overall trust score so I can assess if they meet our security standards?"},{"title":"Monitor vendor certificate expiration risk","prompt":"I need to track expiring SSL certificates across our list of payment processors and SaaS vendors. Can you batch-check these domains and flag any that are expiring in the next 30 days before they cause outages?"}],"resultDescription":"A JSON object containing: DNS records (A, MX, NS, AAAA arrays plus SPF/DMARC/TXT presence), TLS certificate issuer and expiry date with days remaining, HTTP status and security header flags (CSP, HSTS, X-Frame-Options, X-Content-Type), server software, HTTPS enforcement status, a trust score (0-1), individual trust signals, tech hints, confidence score, and a timestamp. Cost is $0.005 USDC per call via x402 on Base — no API key needed.","failureModes":["Domain does not resolve — resolved: false in response","Invalid or malformed domain name input","x402 payment not included or insufficient — 402 Payment Required response","Domain exists but TLS is invalid or expired — reflected in trust signals","Transient upstream DNS resolution failure"],"whenToPreferThis":"Use this endpoint when you need a comprehensive, single-call domain security and infrastructure profile — covering DNS, TLS, HTTP headers, and a computed trust score — without needing an API key. Prefer it over manual DNS lookups or separate TLS checkers when you want a unified trust assessment for phishing detection, vendor due diligence, email deliverability checks, or pre-outreach domain validation. The x402 pay-per-call model makes it ideal for agent workflows where per-query billing is preferable to subscriptions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:36:23.266Z","isFirstParty":false}