Kit Rx Domain WHOIS, DNS & Email Security API docs

Domain registration facts from registry RDAP (registrar, created, expires, status), live DNS records, email authentication grading (MX, SPF walk, DMARC, MTA-STS, BIMI), bulk domain checks, email address validation, and a domain due-diligence risk report. Each call is one x402 v2 payment in USDC on Base, Polygon, Arbitrum, Avalanche or Sei; no signup or API key. Requests that fail or match nothing are not charged.

Domain due-diligence and risk report $0.01

GET /v1/domain/report

Due-diligence report on a website, merchant or counterparty domain: registrable domain, registry RDAP facts (registrar, abuse contact, created, expiry, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CAA) from Cloudflare DNS over HTTPS, SPF and DMARC posture, a live web probe (redirect chain, HTTPS, HSTS, site-supplied title, parked or for-sale signs), brand-impersonation checks, and a 0-100 risk score with transparent weighted signals and a verdict.

Domain registration facts (RDAP whois) $0.003

GET /v1/domain/whois

Registration facts for a domain from its registry's RDAP server, located through the IANA bootstrap file: registrar name, IANA ID and abuse contact, created, updated and expiry dates, age and days to expiry, EPP status codes, transfer lock, nameservers, DNSSEC delegation flag, and the registry RDAP URL and terms link. No registrant contact data. Registries whose terms bar reuse (Nominet, CentralNic, Google Registry) are not queried.

DNS records for a domain $0.003

GET /v1/domain/dns

Current DNS records for a hostname from Cloudflare DNS over HTTPS: A, AAAA, CNAME chain, MX with priority and null-MX flag, NS, TXT (up to 25 records of at most 400 characters, email addresses redacted), CAA as flag, tag and value, and SOA primary nameserver, serial and timers, each with its minimum TTL. An optional type parameter limits the answer to one record type. For subdomains without their own zone, NS and SOA come from the registrable domain.

Email authentication posture (SPF, DMARC, MTA-STS) $0.003

GET /v1/domain/email-auth

Email authentication posture of a domain from DNS (Cloudflare DNS over HTTPS): MX records and null MX, SPF parsed into mechanisms with its all qualifier and a recursive DNS-lookup count against the RFC 7208 limit of 10, DMARC policy (p, sp, pct, alignment, report addresses' domains), MTA-STS and TLS-RPT records, and BIMI. DKIM is not assessed because selectors cannot be enumerated. Returns an A-F grade and 0-100 score with weighted reasons.

Email address verification (syntax, MX, risk flags) $0.003

GET /v1/email/verify

Checks an email address without sending mail: syntax rules (IDN domains in punycode and Unicode), MX records by preference, null MX (RFC 7505), implicit A/AAAA fallback, NXDOMAIN, SPF and DMARC policy, disposable, role, free-webmail and +tag flags, mail provider from MX hosts, and typo suggestions for popular domains. Returns a verdict and 0-100 score with reasons. Mailbox existence is not confirmed. Sources: Cloudflare DNS over HTTPS, disposable-email-domains (CC0).

Kit Rx Domain WHOIS, DNS & Email Security: Domain intelligence for AI agents: WHOIS (RDAP), DNS, SPF/DKIM/DMARC email security, bulk checks and due-diligence scores, paid per call over x402. Machine-readable: OpenAPI, llms.txt, /.well-known/x402, agent skills.