{"uid":"cap_wARMK2qfhpPuIvNHAzfON","slug":"lookproof-site-health-check-8a9554ab","name":"Lookproof Site Health Check","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/site/health?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","title":"RdapInput","required":["domain"],"properties":{"domain":{"type":"string","title":"Domain","examples":["example.com"],"maxLength":1024,"minLength":1}},"description":"A domain or a host under it; a public suffix itself (e.g. co.uk) has no registration.","additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.025","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.025/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__146tIk8XcVbfwIOziObW","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.025","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs a consolidated website security audit covering TLS certificate, HTTP redirect chains, security headers (HSTS, CSP, framing, Referrer-Policy, cookies), and domain registration status in a single call.","exampleAgentPrompt":"Can you run a full site health check on stripe.com — I want to see the TLS certificate details, whether HTTP redirects properly to HTTPS with HSTS, what security headers like CSP and frame protection are set, and when the domain registration expires?","exampleUseCases":[{"title":"Pre-launch security checklist","prompt":"Before we push our new site live at acme-staging.com, can you audit it for TLS validity, HTTPS redirect chain, security headers like CSP and HSTS, and check the domain registration isn't about to expire?"},{"title":"Competitor site security comparison","prompt":"I want to compare the security basics of competitor.io against ours — can you pull a site health report covering their TLS cert, HTTP redirect behavior, security headers, and domain expiry?"},{"title":"Client site health report","prompt":"Can you generate a site security summary for myclient.com that covers TLS certificate trust and expiry, whether HSTS and CSP headers are in place, cookie security flags, and their domain registration status?"}],"resultDescription":"Returns a structured multi-section report with coded findings for: TLS certificate (trust chain, name match, expiry date, key details), HTTP and HTTPS redirect chains with HSTS presence, Content Security Policy, X-Frame-Options, Referrer-Policy and cookie security flags, and domain registration data from RDAP including expiry date and EPP statuses. No numeric score is computed; each section contains discrete findings.","failureModes":["Domain is a public suffix (e.g. co.uk) — RDAP registration lookup will return no results","Domain does not resolve or has no server on port 443 — TLS section will report connection failure","RDAP registry for the TLD is unavailable — domain expiry section may be incomplete","Invalid or malformed domain input — request rejected with validation error","Server behind the domain times out — redirect chain section may be partial"],"whenToPreferThis":"Prefer this endpoint when you need a consolidated website security audit in a single call rather than invoking separate TLS, redirect, header, and RDAP checks individually. It is more cost-efficient than three separate checks and ideal for building site health dashboards, pre-launch checklists, or automated monitoring workflows. Use sibling endpoints instead when you need only one specific signal (e.g. TLS-only or RDAP-only) and want to minimize latency or cost for that narrower use case.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:39:38.907Z","isFirstParty":false,"canonicalSlug":"lookproof-site-health-check-8a9554ab"}