# Domain and DNS Checks

DNS records, email authentication, DNSSEC, CAA, registration data and email address checks.

## How to pay

Machine-payable over x402. USDC on: Base (eip155:8453), Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp), Polygon (eip155:137), Arbitrum One (eip155:42161).
No accounts. No API keys. No signup. The paying wallet is the account.

## Machine-readable

- OpenAPI: https://domain-dns.x402tookit.com/openapi.json
- x402 manifest: https://domain-dns.x402tookit.com/.well-known/x402
- Catalog (free): https://domain-dns.x402tookit.com/catalog
- Health (free): https://domain-dns.x402tookit.com/health
- Uptime (free): https://domain-dns.x402tookit.com/uptime

## Endpoints (9)

### GET /caa-check — $0.02
CAA records for a domain (walking up to parent names): which CAs may issue certificates, wildcard rules and reporting contacts.
Params: domain: string
Example: https://domain-dns.x402tookit.com/caa-check?domain=cloudflare.com

### GET /dns-records — $0.03
A, AAAA, NS, MX, TXT and CAA records of a domain in one call, with TTLs and whether it exists.
Params: domain: string
Example: https://domain-dns.x402tookit.com/dns-records?domain=example.com

### GET /dnssec-check — $0.03
DNSSEC status of a domain: DS record at the parent, DNSKEY algorithms, and whether the resolver validated the answer.
Params: domain: string
Example: https://domain-dns.x402tookit.com/dnssec-check?domain=cloudflare.com

### GET /domain-parse — $0.02
Split a domain or URL host into labels, registrable domain and subdomain; convert punycode and flag lookalike traits.
Params: domain: string
Example: https://domain-dns.x402tookit.com/domain-parse?domain=https%3A%2F%2Fwww.bbc.co.uk%2Fnews

### GET /domain-registration — $0.05
Registration facts for a domain from RDAP: registrar, created, expires, status and nameservers, with age and expiry flags.
Params: domain: string
Example: https://domain-dns.x402tookit.com/domain-registration?domain=example.com

### GET /email-auth-check — $0.03
Grade a domain's email authentication: SPF and DMARC records parsed, policy strength, and spoofing exposure.
Params: domain: string
Example: https://domain-dns.x402tookit.com/email-auth-check?domain=google.com

### GET /email-check — $0.03
Email address screen: syntax, whether its domain accepts mail (MX), role account and known disposable domain flags.
Params: email: string
Example: https://domain-dns.x402tookit.com/email-check?email=someone%40gmail.com

### GET /mx-check — $0.03
Mail servers of a domain by priority, whether each resolves to an address, and null-MX or implicit-MX handling.
Params: domain: string
Example: https://domain-dns.x402tookit.com/mx-check?domain=gmail.com

### GET /ns-health — $0.03
Nameserver health of a domain: count, provider diversity, whether each nameserver resolves, and the SOA serial.
Params: domain: string
Example: https://domain-dns.x402tookit.com/ns-health?domain=example.com

## Terms

DNS and registration facts come from public resolvers and RDAP servers at the time of the query and local computation, provided as is. DNS answers vary by resolver and time, and registration data can be redacted or stale. A good result is not a safety verdict on a domain or sender.