{
  "service": "Kit Rx Domain WHOIS, DNS & Email Security",
  "tagline": "Domain intelligence for AI agents: WHOIS (RDAP), DNS, SPF/DKIM/DMARC email security, bulk checks and due-diligence scores, paid per call over x402.",
  "summary": "Domain registration facts from registry RDAP (registrar, created, expires, status), live DNS records, email authentication grading (MX, SPF walk, DMARC, MTA-STS, BIMI), bulk domain checks, email address validation, and a domain due-diligence risk report. Each call is one x402 v2 payment in USDC on Base, Polygon, Arbitrum, Avalanche or Sei; no signup or API key. Requests that fail or match nothing are not charged.",
  "payment": {
    "protocol": "x402 v2",
    "scheme": "exact",
    "network": "eip155:8453",
    "also_accepted_networks": [
      "eip155:137",
      "eip155:42161",
      "eip155:43114",
      "eip155:1329"
    ],
    "asset": "USDC",
    "payTo": "0xAf8E0A8a8A0A8f65831b2dD0FFe0c1B804698D70",
    "facilitator": "https://facilitator.payai.network",
    "charged_only_on_success": true
  },
  "docs": {
    "openapi": "https://domain.kit-rx.com/openapi.json",
    "llms": "https://domain.kit-rx.com/llms.txt",
    "html": "https://domain.kit-rx.com/docs"
  },
  "mcp": {
    "url": "https://domain.kit-rx.com/mcp",
    "transport": "streamable-http",
    "registry_name": "com.kit-rx.api/kitrx"
  },
  "endpoints": [
    {
      "id": "domain.report",
      "method": "GET",
      "url": "https://domain.kit-rx.com/v1/domain/report",
      "price_usd": "$0.01",
      "price_atomic_usdc": "10000",
      "title": "Domain due-diligence and risk report",
      "description": "Due-diligence report on a website, merchant or counterparty domain: registrable domain, registry RDAP facts (registrar, abuse contact, created, expiry, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CAA) from Cloudflare DNS over HTTPS, SPF and DMARC posture, a live web probe (redirect chain, HTTPS, HSTS, site-supplied title, parked or for-sale signs), brand-impersonation checks, and a 0-100 risk score with transparent weighted signals and a verdict.",
      "params": [
        {
          "name": "domain",
          "required": true,
          "description": "Bare domain, hostname, email address or URL. Scheme, path, port and credentials are stripped and IDNs are converted to punycode. IP addresses and private names are rejected.",
          "example": "github.com",
          "type": "string"
        }
      ],
      "example": "https://domain.kit-rx.com/v1/domain/report?domain=github.com"
    },
    {
      "id": "domain.whois",
      "method": "GET",
      "url": "https://domain.kit-rx.com/v1/domain/whois",
      "price_usd": "$0.003",
      "price_atomic_usdc": "3000",
      "title": "Domain registration facts (RDAP whois)",
      "description": "Registration facts for a domain from its registry's RDAP server, located through the IANA bootstrap file: registrar name, IANA ID and abuse contact, created, updated and expiry dates, age and days to expiry, EPP status codes, transfer lock, nameservers, DNSSEC delegation flag, and the registry RDAP URL and terms link. No registrant contact data. Registries whose terms bar reuse (Nominet, CentralNic, Google Registry) are not queried.",
      "params": [
        {
          "name": "domain",
          "required": true,
          "description": "Bare domain, hostname, email address or URL. Scheme, path, port and credentials are stripped and IDNs are converted to punycode. IP addresses and private names are rejected. Facts describe the registrable domain (eTLD+1).",
          "example": "github.com",
          "type": "string"
        }
      ],
      "example": "https://domain.kit-rx.com/v1/domain/whois?domain=github.com"
    },
    {
      "id": "domain.dns",
      "method": "GET",
      "url": "https://domain.kit-rx.com/v1/domain/dns",
      "price_usd": "$0.003",
      "price_atomic_usdc": "3000",
      "title": "DNS records for a domain",
      "description": "Current DNS records for a hostname from Cloudflare DNS over HTTPS: A, AAAA, CNAME chain, MX with priority and null-MX flag, NS, TXT (up to 25 records of at most 400 characters, email addresses redacted), CAA as flag, tag and value, and SOA primary nameserver, serial and timers, each with its minimum TTL. An optional type parameter limits the answer to one record type. For subdomains without their own zone, NS and SOA come from the registrable domain.",
      "params": [
        {
          "name": "domain",
          "required": true,
          "description": "Bare domain, hostname, email address or URL. Scheme, path, port and credentials are stripped and IDNs are converted to punycode. IP addresses and private names are rejected.",
          "example": "github.com",
          "type": "string"
        },
        {
          "name": "type",
          "required": false,
          "description": "One record type to return instead of all of them (case-insensitive).",
          "example": "MX",
          "type": "string",
          "enum": [
            "A",
            "AAAA",
            "CNAME",
            "MX",
            "NS",
            "TXT",
            "CAA",
            "SOA"
          ]
        }
      ],
      "example": "https://domain.kit-rx.com/v1/domain/dns?domain=github.com"
    },
    {
      "id": "domain.email-auth",
      "method": "GET",
      "url": "https://domain.kit-rx.com/v1/domain/email-auth",
      "price_usd": "$0.003",
      "price_atomic_usdc": "3000",
      "title": "Email authentication posture (SPF, DMARC, MTA-STS)",
      "description": "Email authentication posture of a domain from DNS (Cloudflare DNS over HTTPS): MX records and null MX, SPF parsed into mechanisms with its all qualifier and a recursive DNS-lookup count against the RFC 7208 limit of 10, DMARC policy (p, sp, pct, alignment, report addresses' domains), MTA-STS and TLS-RPT records, and BIMI. DKIM is not assessed because selectors cannot be enumerated. Returns an A-F grade and 0-100 score with weighted reasons.",
      "params": [
        {
          "name": "domain",
          "required": true,
          "description": "Bare domain, hostname, email address or URL. Scheme, path, port and credentials are stripped and IDNs are converted to punycode. IP addresses and private names are rejected.",
          "example": "github.com",
          "type": "string"
        }
      ],
      "example": "https://domain.kit-rx.com/v1/domain/email-auth?domain=github.com"
    },
    {
      "id": "email.verify",
      "method": "GET",
      "url": "https://domain.kit-rx.com/v1/email/verify",
      "price_usd": "$0.003",
      "price_atomic_usdc": "3000",
      "title": "Email address verification (syntax, MX, risk flags)",
      "description": "Checks an email address without sending mail: syntax rules (IDN domains in punycode and Unicode), MX records by preference, null MX (RFC 7505), implicit A/AAAA fallback, NXDOMAIN, SPF and DMARC policy, disposable, role, free-webmail and +tag flags, mail provider from MX hosts, and typo suggestions for popular domains. Returns a verdict and 0-100 score with reasons. Mailbox existence is not confirmed. Sources: Cloudflare DNS over HTTPS, disposable-email-domains (CC0).",
      "params": [
        {
          "name": "email",
          "required": true,
          "description": "Email address to check, up to 512 characters (addresses over 254 octets are reported as invalid). A mailto: link (its ?query and #fragment dropped) or a Name <address> header form is unwrapped first. Inputs without an @, quoted local parts, IP-literal domains and mailto links with several addresses are rejected with 400 and not charged.",
          "example": "jane.doe+news@gmail.com",
          "type": "string"
        }
      ],
      "example": "https://domain.kit-rx.com/v1/email/verify?email=jane.doe%2Bnews%40gmail.com"
    }
  ]
}