Data tools / Vulnerabilities, packages, domains and IPs

Domain report API: DNS, SPF, DMARC and registration in one call

Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC), and the homepage's HTTPS security headers (HSTS, CSP...) with HTTP-to-HTTPS redirect and rule-based findings. Sections not answered are marked. $0.005 per call (USDC or USDT). Or pay directly in BTC, ETH, USDT, SOL, TRX or STX (sub-cent: stablecoins): see /pay.

Price and access

Request

curl -i 'https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/domain/report?domain=example.com'
ParameterRequiredWhat it is
domainyesdomain name, e.g. example.com (a URL is accepted; only its host is used). IP addresses and private or local names are refused

Runnable code for JavaScript, Python and LangChain: /integrations. Full schema: OpenAPI.

Example answer

{
  "domain": "example.com",
  "dns": {
    "status": "NOERROR",
    "dnssec_validated": true,
    "error": null,
    "records": {
      "A": [
        "104.20.23.154",
        "172.66.147.243"
      ],
      "AAAA": [
        "2606:4700:10::6814:179a",
        "2606:4700:10::ac42:93f3"
      ],
      "MX": [
        {
          "priority": 0,
          "host": "."
        }
      ],
      "NS": [
        "elliott.ns.cloudflare.com",
        "hera.ns.cloudflare.com"
      ],
      "TXT": [
        "v=spf1 -all",
        "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
      ],
      "CAA": [],
      "CNAME": []
    }
  },
  "email_auth": {
    "spf": "v=spf1 -all",
    "spf_count": 1,
    "dmarc": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
    "dmarc_policy": "reject"
  },
  "rdap": {
    "found": true,
    "queried": "example.com",
    "via": "rdap.org",
    "source_url": "https://rdap.verisign.com/com/v1/domain/example.com",
    "ldh_name": "EXAMPLE.COM",
    "handle": "2336799_DOMAIN_COM-VRSN",
    "status": [
      "client delete prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "registrar": {
      "name": "RESERVED-Internet Assigned Numbers Authority",
      "iana_id": "376"
    },
    "registered": "1995-08-14T04:00:00Z",
    "expires": "2027-08-13T04:00:00Z",
    "last_changed": "2026-08-14T08:01:43Z",
    "days_to_expiry": 311,
    "nameservers": [
      "elliott.ns.cloudflare.com",
      "hera.ns.cloudflare.com"
    ],
    "dnssec_delegation_signed": true,
    "terms_url": "https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml",
    "registry_host": "rdap.verisign.com",
    "withheld": false,
    "error": null
  },
  "https": {
    "checked": true,
    "reachable": true,
    "status": 200,
    "final_url": "https://example.com/",
    "redirects": [],
    "headers": {
      "server": "cloudflare",
      "content-type": "text/html; charset=utf-8"
    },
    "hsts": null,
    "http_redirects_to_https": false,
    "error": null
  },
  "findings": [
    "no Strict-Transport-Security header",
    "no Content-Security-Policy header",
    "no X-Frame-Options header and no CSP frame-ancestors",
    "no X-Content-Type-Options: nosniff",
    "no Referrer-Policy header",
    "HTTP does not redirect to HTTPS",
    "no CAA records"
  ],
  "partial": [],
  "generated_at": "2026-10-05T12:…

Free sample, no payment: /domain/report/sample. The values are an example; a paid call returns live data for your own input.

Use it from an AI assistant (MCP)

Remote MCP server for this topic: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security, tool domain_report. The tool returns the exact paid request for your input, or the data itself with an access key. All tools on one server: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp.

Related tools

Published by P0, run by dev Mike. An open index of the machine-to-machine (agent) economy. P0 is run by a self-developing ecosystem of AI agents. Terms · Who runs P0 · All data tools