{"uid":"cap_xLfztOTSK_qz0S5eBfqVR","slug":"connskill-domain-security-check-3f71b17a","name":"CONNSKILL Domain Security Check","description":"Market data and real-world actions for AI agents: keyword and SERP research by location, SMS verification, receive-only inboxes, social marketing, EU-hosted LLMs. Paid per call in USDC on Base. No account, no API key, no minimum.","url":"https://agent.connskill.com/v1/domain-security-check","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","minLength":4,"description":"Bare domain, e.g. example.com"}}},"responseSchema":{"type":"json","example":{"dns":{"mx":["."],"caa":[],"spfAll":"-all","dmarcPolicy":"reject"},"tls":{"issuer":"SSL Corporation","daysLeft":53,"protocol":"TLSv1.3","authorized":true},"http":{"csp":false,"hsts":null,"status":200},"grade":"C","score":68,"domain":"example.com","status":"delivered","exposure":{"verdict":{"level":"medium","reasons":["12 leak record(s) mention the domain"]}},"findings":[{"code":"no_https_redirect","text":"HTTP does not redirect to HTTPS","severity":"medium"},{"code":"no_hsts","text":"No Strict-Transport-Security header","severity":"low"}],"registration":{"dnssec":true,"expires":"2027-08-13T04:00:00Z","registrar":"RESERVED-Internet Assigned Numbers Authority"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_oejNTCDBw4PXo42VRR0QE","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive security audit of a domain, returning DNS configuration, TLS certificate status, HTTP security headers, data breach exposure, and an overall security grade.","exampleAgentPrompt":"Can you run a full security check on shopify.com and tell me its grade, whether DMARC and SPF are set up correctly, if the TLS cert is still valid, and whether it shows up in any breach records?","exampleUseCases":[{"title":"Pre-partnership vendor security review","prompt":"Before we sign with this vendor, can you audit the security of their domain vendorcorp.io — I need to know their overall grade, whether they have proper email authentication set up, and if their domain has shown up in any data leaks?"},{"title":"TLS certificate expiry monitoring","prompt":"Check the domain api.myproduct.com and tell me how many days are left on the TLS certificate, what protocol it uses, and whether it's currently authorized — I want to know if we're at risk of an imminent expiry."},{"title":"Email deliverability and spoofing risk check","prompt":"I'm worried about email spoofing on our domain brandname.com — can you check what our SPF all-qualifier and DMARC policy are set to, and whether we have CAA records in place?"}],"resultDescription":"Returns a JSON object containing: overall security grade (A–F) and numeric score (0–100); DNS details including MX records, SPF all-qualifier, DMARC policy, and CAA records; TLS details including issuer, days until expiry, protocol version, and authorization status; HTTP details including CSP presence, HSTS header value, and HTTP status code; data breach exposure verdict with severity level and reasons; and a list of specific security findings with codes, descriptions, and severity levels. Also returns domain registration info including DNSSEC status, expiry date, and registrar.","failureModes":["Domain not found or unresolvable — DNS lookup fails, returning error or empty DNS fields","Domain too short (under 4 characters) — rejected by input validation","TLS check failure if the domain has no HTTPS endpoint — tls fields may be null or empty","Rate limiting or upstream DNS/security feed unavailability causing partial results","Payment failure via x402 protocol — call not executed if USDC payment on Base is not confirmed"],"whenToPreferThis":"Choose this endpoint when you need a single-call, comprehensive domain security snapshot covering DNS email authentication (SPF, DMARC), TLS certificate health, HTTP security headers, DNSSEC, and breach exposure all at once. It is ideal for agents performing pre-partnership due diligence, automated security monitoring, or compliance checks. Prefer it over dedicated DNS or SSL checkers when you need a unified grade and multi-signal findings in one response. No account or API key is required — pay $0.05 USDC per call on Base via x402.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:33:34.535Z","isFirstParty":false}