Domain due-diligence and risk report API

Due-diligence report on a website, merchant or counterparty domain: registrable domain, registry RDAP facts (registrar, abuse contact, created, expiry, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CAA) from Cloudflare DNS over HTTPS, SPF and DMARC posture, a live web probe (redirect chain, HTTPS, HSTS, site-supplied title, parked or for-sale signs), brand-impersonation checks, and a 0-100 risk score with transparent weighted signals and a verdict.

$0.01 per call USDC over x402 v2 on Base, Polygon, Arbitrum, Avalanche or Sei. No signup, no API key. Requests that fail or match nothing are not charged.

Endpoint

GET https://api.kit-rx.com/v1/domain/report

Parameters

Name	Type	Required	Description
`domain`	string	yes	Bare domain, hostname, email address or URL. Scheme, path, port and credentials are stripped and IDNs are converted to punycode. IP addresses and private names are rejected. e.g. `github.com`

Example request

https://api.kit-rx.com/v1/domain/report?domain=github.com

Without payment the server answers 402 Payment Required with the price (10000 atomic USDC) in the PAYMENT-REQUIRED header. Any x402 v2 client pays and retries automatically. A request with no parameters runs this example.

curl -i "https://api.kit-rx.com/v1/domain/report?domain=github.com"

Pay from an agent

AgentCash: fetch the URL. OpenDexter MCP: x402_fetch. Kit Rx MCP server: https://api.kit-rx.com/mcp. Code:

import { x402Client } from "@x402/core/client";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client();
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.BUYER_KEY) });
const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://api.kit-rx.com/v1/domain/report?domain=github.com");
console.log(await res.json());

Example response

{
  "query": {
    "domain": "github.com"
  },
  "result": {
    "host": "github.com",
    "host_unicode": null,
    "registrable_domain": "github.com",
    "public_suffix": "com",
    "shared_platform": null,
    "registered": true,
    "registration_basis": "rdap",
    "risk": {
      "score": 0,
      "verdict": "low",
      "confidence": "normal",
      "signals": []
    },
    "registration": {
      "registrar": "MarkMonitor Inc.",
      "registrar_iana_id": "292",
      "registrar_abuse": {
        "email": "abusecomplaints@markmonitor.com",
        "phone": "+1.2086851750"
      },
      "created": "2007-10-09T18:20:50.000Z",
      "expires": "2028-10-09T18:20:50.000Z",
      "last_changed": "2026-09-07T09:22:52.000Z",
      "age_days": 6975,
      "days_to_expiry": 695,
      "status": [
        "client delete prohibited"
      ],
      "nameservers": [
        "dns1.p08.nsone.net"
      ],
      "dnssec": false,
      "registry_terms": {
        "title": "Terms of Service",
        "link": "https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml"
      }
    },
    "dns": {
      "status": "NOERROR",
      "nxdomain": false,
      "registrable_nxdomain": false,
      "a": [
        "140.82.114.4"
      ],
      "aaaa": [],
      "cname": [],
      "ns": [
        "dns1.p08.nsone.net"
      ],
      "caa": [
        "0 issue \"digicert.com\""
      ],
      "all_addresses_public": true,
      "verification_tokens": [
        "ms"
      ]
    },
    "email": {
      "domain": "github.com",
      "accepts_mail": true,
      "null_mx": false,
      "mx": [
        {
          "priority": 0,
          "host": "github-com.mail.protection.outlook.com"
        }
      ],
      "spf": {
        "present": true,
        "record": "v=spf1 ip4:192.30.252.0/22 …",
        "all": "~all",
        "redirect": null
      },
      "dmarc": {
        "present": true,
        "record_domain": "github.com",
        "record": "v=DMARC1; p=quarantine; …",
        "policy": "quarantine",
        "subdomain_policy": "reject",
        "pct": 100,
        "reporting": true,
        "multiple_records": false
      }
    },
    "web": {
      "probed": true,
      "skipped_reason": null,
      "final_url": "https://github.com/",
      "status": 200,
      "redirect_chain": [],
      "https_ok": true,
      "https_direct": true,
      "hsts": true,
      "server": "github.com",
      "content_type": "text/html",
      "title": "GitHub · Change is …",
      "final_registrable": "github.com",
      "cross_domain_redirect": false,
      "parked": false,
      "parked_indicators": [],
      "error": null
    },
    "brand_impersonation": null
  },
  "sources": [
    {
      "name": "Cloudflare DNS over HTTPS (JSON API)",
      "url": "https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/make-api-requests/dns-json/"
    },
    {
      "name": "IANA RDAP bootstrap",
      "url": "https://data.iana.org/rdap/dns.json"
    },
    {
      "name": "Registry RDAP (rdap.verisign.com)",
      "url": "https://rdap.verisign.com/com/v1/domain/github.com"
    }
  ],
  "attribution": [
    "Registration data from the …",
    "DNS resolved via Cloudflare …"
  ],
  "generated_at": "2026-11-13T21:25:14.379Z"
}

Kit Rx: Composed public-data reports for AI agents, paid per call in USDC over x402. Machine-readable: OpenAPI, llms.txt, /.well-known/x402, agent skills.