addrbookFor publishers
← The evidence ledger

Evidence row 1504032

Observed , by sync.agentic_market/1.

Kind
listing
About
source_record agentic_market:api-lookproof-dev
Recorded
Previous row
#1035841
Body SHA-256
7adfd6e81e609c1f469db9af9976cd581a0a8a659ccd5f4c6a545f1f0a457f17
Leaf
0xae4e7bd1db08e9cd64d0c983445070b4c07dad78fc96eaa31684ee64eef67fb4

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/caa"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/compare"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/dnssec"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/https-rr"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/idn"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/lookup"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/ns"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/ns-provider"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/soa"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/ttl"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/txt-verification"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/wildcard"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/dns/zone-lint"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/domain/health"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/domain/rdap"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/http/cookie-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/http/csp-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/http/hsts-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/http/security-headers"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/ip/cidr"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/ip/contains"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/ip/info"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/ip/range-to-cidr"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/ip/subnets"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/bimi"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/bimi-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/check"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/check/bulk"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/dkim"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/dkim-discover"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/dmarc"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/dmarc-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/mta-sts"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/mta-sts-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/mx"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/provider"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/ptr"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/spf"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/spf-flatten"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/spf-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/spoofable"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/tlsrpt"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/mail/tlsrpt-parse"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/site/health"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/tls/certificate"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/tls/csr-decode"
    ],
    [
      "x402",
      "https://api.lookproof.dev/v1/tls/pem-decode"
    ]
  ],
  "name": "api.lookproof.dev",
  "owner_address": null,
  "raw": {
    "caip2_networks": [
      "eip155:8453"
    ],
    "category": "",
    "description": "",
    "domain": "api.lookproof.dev",
    "endpoints": [
      {
        "description": "Evaluate a domain's CAA records (RFC 8659), climbing to parent names up to the registrable domain when the name has none: allowed issuers for normal and wildcard certificates, iodef, unknown critical tags and invalid values. Use when an agent must tell which certificate authorities may issue for a domain, or why a certificate request is refused because of CAA.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "caa",
          "tls",
          "certificates",
          "security"
        ],
        "url": "https://api.lookproof.dev/v1/dns/caa"
      },
      {
        "description": "Ask Cloudflare and Google the same DNS question, each alone and uncached, and compare response codes and records; different codes (such as SERVFAIL from one) are a warning, different records information. Use when an agent debugs propagation, DNSSEC or resolver-specific answers. Input: ?name=example.com&type=A.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "name",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "A",
            "group": "query",
            "name": "type",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "resolvers",
          "propagation",
          "dnssec",
          "compare"
        ],
        "url": "https://api.lookproof.dev/v1/dns/compare"
      },
      {
        "description": "Report a domain's DNSSEC status (secure, insecure, bogus or unknown) as validated by public resolvers, with DS and DNSKEY algorithms, deprecated algorithms, SHA-1 digests and DS records without a matching key. Use when an agent must tell whether a domain is signed, why it fails on validating resolvers, or whether a key rollover left the chain of trust broken.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "dnssec",
          "security",
          "ds",
          "dnskey"
        ],
        "url": "https://api.lookproof.dev/v1/dns/dnssec"
      },
      {
        "description": "Read a name's HTTPS records (RFC 9460, SVCB): priority, target, AliasMode or ServiceMode, alpn (h3, h2), port, IPv4 and IPv6 hints and whether ECH is published, with AliasMode conflicts and missing mandatory keys. Use when an agent checks HTTP/3 or ECH setup. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "https",
          "svcb",
          "http3",
          "ech"
        ],
        "url": "https://api.lookproof.dev/v1/dns/https-rr"
      },
      {
        "description": "Convert a domain name between Unicode and punycode (A-labels) and check it against IDNA2008 and UTS 46: disallowed characters, bidi, context and hyphen rules, lengths, and mixed scripts in one label (homograph risk), per label. Offline. Use when an agent must register, compare or display an internationalised domain. Input: ?name=bücher.example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "bücher.example.com",
            "group": "query",
            "name": "name",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "idn",
          "punycode",
          "unicode",
          "homograph"
        ],
        "url": "https://api.lookproof.dev/v1/dns/idn"
      },
      {
        "description": "Resolve chosen DNS record types (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV) for a name through public resolvers, with TTL, observation time and the resolver that answered. Use when an agent needs the current public DNS answer for a name, for example to confirm that a record change is visible or to read a TXT verification record.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "name",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": [],
            "group": "query",
            "name": "types",
            "required": false,
            "type": "array"
          }
        ],
        "pricing": {
          "amount": "0.005",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "lookup",
          "records",
          "ttl"
        ],
        "url": "https://api.lookproof.dev/v1/dns/lookup"
      },
      {
        "description": "Check a zone's name servers: the NS set, the IPv4 and IPv6 addresses of up to eight servers, a single server, servers that do not resolve, all addresses in one /24 or /48, one TLD for every name and in-zone servers that need glue. Use when an agent reviews DNS redundancy or a delegation. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "nameservers",
          "ns",
          "redundancy",
          "delegation"
        ],
        "url": "https://api.lookproof.dev/v1/dns/ns"
      },
      {
        "description": "Find which DNS provider a domain's NS records point to (Cloudflare, Route 53, Azure DNS, Google Cloud DNS, GoDaddy, Namecheap, NS1, Hetzner, OVHcloud and more) from a fixed, versioned list of name server patterns, with unknown name servers and several providers listed. Use when an agent must know where a zone is hosted before a DNS change. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "nameservers",
          "hosting",
          "provider",
          "ns"
        ],
        "url": "https://api.lookproof.dev/v1/dns/ns-provider"
      },
      {
        "description": "Check a zone's SOA record through public resolvers: primary server, contact name, serial (YYYYMMDDnn or counter), refresh, retry, expire and negative caching TTL against RFC 1912 and RFC 2308. Use when an agent must explain zone transfer timers or why a deleted name keeps answering NXDOMAIN. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "soa",
          "zone",
          "secondary",
          "ttl"
        ],
        "url": "https://api.lookproof.dev/v1/dns/soa"
      },
      {
        "description": "Show the TTL of A, AAAA, MX, NS, TXT, CAA and SOA records with its source: exact from a validated DNSSEC signature (RRSIG Original TTL) or the resolver's remaining cache time (normally a lower bound), plus the SOA negative caching TTL. Use when an agent plans a DNS change and must know how long old records live. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "ttl",
          "cache",
          "dnssec",
          "records"
        ],
        "url": "https://api.lookproof.dev/v1/dns/ttl"
      },
      {
        "description": "List the domain verification tokens in a domain's apex TXT records (google-site-verification, MS=, Atlassian, Facebook, Apple, Adobe, DocuSign, Stripe and more) from a fixed, versioned list, with the full public token and services that have several. Use when an agent audits or cleans up old verification records. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "txt",
          "verification",
          "audit",
          "records"
        ],
        "url": "https://api.lookproof.dev/v1/dns/txt-verification"
      },
      {
        "description": "Find out whether a DNS zone has a wildcard (RFC 4592): A, AAAA, TXT and MX of a random, uncached name under the domain through public resolvers, with a warning for a wildcard MX that accepts mail for every invented subdomain. Use when an agent must tell whether a subdomain really exists. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "wildcard",
          "subdomains",
          "mx",
          "records"
        ],
        "url": "https://api.lookproof.dev/v1/dns/wildcard"
      },
      {
        "description": "Check a pasted DNS zone file (RFC 1035 master format, up to 64 KiB) with $ORIGIN and $TTL: unreadable lines, SOA and NS at the apex, CNAME at the apex or beside other data, duplicates, mixed TTLs in a set, out-of-zone names, NS/MX targets without addresses and SOA timers. Offline. Use when an agent edits a zone before loading it. Input: {\"zone\": \"$TTL 3600\\n@ IN SOA ...\", \"origin\": \"example.com\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "body",
            "name": "origin",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "$TTL 3600\n@       IN SOA  ns1.example.com. hostmaster.example.com. (\n                2026102701 ; serial\n                7200       ; refresh\n                3600       ; retry\n                1209600    ; expire\n                3600 )     ; minimum\n        IN NS   ns1\n        IN NS   ns2.example.net.\n        IN MX   10 mail\n        IN A    192.0.2.10\nns1     IN A    192.0.2.53\nmail    IN A    192.0.2.25\nwww     IN CNAME @\nwww     IN TXT  \"site-verification=abc123\"\n",
            "group": "body",
            "name": "zone",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "dns",
          "zone",
          "lint",
          "bind",
          "records"
        ],
        "url": "https://api.lookproof.dev/v1/dns/zone-lint"
      },
      {
        "description": "One report on a domain's mail and DNS security: MX, SPF, DMARC, common DKIM selectors, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of the mail servers, BIMI and CAA in one call, each as its own section with coded findings and evidence. Use when an agent must audit a domain's email security or build a domain health report; cheaper than calling the nine checks one by one. No score is computed.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.08",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "domain",
          "email",
          "dns",
          "security",
          "audit"
        ],
        "url": "https://api.lookproof.dev/v1/domain/health"
      },
      {
        "description": "Look up a domain's registration at its registry over RDAP (RFC 9083, servers from the IANA bootstrap file): registrar and IANA id, creation, change and expiry dates, EPP statuses such as hold or pending delete, nameservers and DNSSEC delegation. Contact data is never returned. Use when an agent must tell when a domain expires, whether it is locked against transfer or why it suddenly stopped resolving.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "domain",
          "rdap",
          "whois",
          "expiry",
          "registrar"
        ],
        "url": "https://api.lookproof.dev/v1/domain/rdap"
      },
      {
        "description": "Parse a pasted Set-Cookie header as RFC 6265bis does: Secure, HttpOnly, SameSite, Partitioned, __Host- and __Secure- prefix rules, Domain, Path, Expires and Max-Age with the 400-day cap. The cookie value is never returned, only its length. Offline. Use when an agent reviews session cookie settings. Input: {\"header\": \"__Host-sid=x; Path=/; Secure; HttpOnly; SameSite=Lax\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "Set-Cookie: __Secure-session=3f9a1c7e5b2d; Domain=example.com; Path=/; Secure; HttpOnly; SameSite=Lax; Max-Age=86400",
            "group": "body",
            "name": "header",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "http",
          "cookies",
          "security",
          "headers",
          "session"
        ],
        "url": "https://api.lookproof.dev/v1/http/cookie-parse"
      },
      {
        "description": "Parse a pasted Content-Security-Policy value as CSP Level 3 does: directives and sources per policy, 'unsafe-inline' and 'unsafe-eval', wildcard and scheme-only script or plugin sources, missing default-src, object-src and base-uri, and report-only mode. Offline. Use when an agent writes or reviews a CSP before it is deployed. Input: {\"header\": \"default-src 'self'; script-src 'self'\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.example.com; object-src 'none'; base-uri 'self'",
            "group": "body",
            "name": "header",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "http",
          "csp",
          "security",
          "headers",
          "xss"
        ],
        "url": "https://api.lookproof.dev/v1/http/csp-parse"
      },
      {
        "description": "Parse a pasted Strict-Transport-Security value as RFC 6797 does: whether browsers accept it, max-age, includeSubDomains, preload, and which hstspreload.org header rules it meets. Offline. Use when an agent sets up HSTS or prepares a preload submission. Input: {\"header\": \"max-age=31536000; includeSubDomains; preload\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "max-age=63072000; includeSubDomains; preload",
            "group": "body",
            "name": "header",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "http",
          "hsts",
          "https",
          "security",
          "headers"
        ],
        "url": "https://api.lookproof.dev/v1/http/hsts-parse"
      },
      {
        "description": "Follow a site's redirect chains from http:// and https:// and read the security headers of the final HTTPS response: HSTS with preload readiness, Content-Security-Policy with unsafe-inline detection, X-Content-Type-Options, frame protection, Referrer-Policy and cookie flags (never values). Use when an agent must tell whether a site forces HTTPS, why HSTS preload fails or which headers are missing.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "http",
          "https",
          "hsts",
          "csp",
          "security"
        ],
        "url": "https://api.lookproof.dev/v1/http/security-headers"
      },
      {
        "description": "Compute a CIDR block: network, first and last address, number of addresses, netmask and host mask, and whether the input had host bits set (192.0.2.5/24). IPv4 and IPv6, offline. Use when an agent must check or explain a CIDR block in a firewall, SPF or cloud configuration. Input: ?cidr=192.0.2.5/24.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.5/24",
            "group": "query",
            "name": "cidr",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "ip",
          "cidr",
          "subnet",
          "network",
          "calculator"
        ],
        "url": "https://api.lookproof.dev/v1/ip/cidr"
      },
      {
        "description": "Check one IPv4 or IPv6 address against up to 100 CIDR blocks and get, for each, whether it contains the address, plus the blocks that do; blocks of the other IP version never match. Offline. Use when an agent must tell whether an address is in an allow list, a provider's ranges or an SPF ip4/ip6 term. Input: {\"ip\": \"192.0.2.10\", \"cidrs\": [\"192.0.2.0/24\"]}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": [],
            "group": "body",
            "name": "cidrs",
            "required": false,
            "type": "array"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.10",
            "group": "body",
            "name": "ip",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "ip",
          "cidr",
          "allowlist",
          "firewall",
          "network"
        ],
        "url": "https://api.lookproof.dev/v1/ip/contains"
      },
      {
        "description": "Classify an IPv4 or IPv6 address by IANA's special-purpose registries (private, loopback, link-local, shared, documentation, 6to4, Teredo, NAT64 and more, with the RFC), with compressed and expanded forms, the reverse DNS name and the IPv4 form of an IPv4-mapped address. Offline. Use when an agent must tell whether an address is public. Input: ?ip=192.0.2.1.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.1",
            "group": "query",
            "name": "ip",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "ip",
          "ipv6",
          "network",
          "classification",
          "offline"
        ],
        "url": "https://api.lookproof.dev/v1/ip/info"
      },
      {
        "description": "Turn a start and end IPv4 or IPv6 address into the smallest list of CIDR blocks that covers exactly that range (at most 62 for IPv4, 254 for IPv6). Offline. Use when an agent must write a range from a provider or registry as firewall, ACL or SPF entries. Input: ?start=192.0.2.10&end=192.0.2.20.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.20",
            "group": "query",
            "name": "end",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.10",
            "group": "query",
            "name": "start",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "ip",
          "cidr",
          "range",
          "firewall",
          "network"
        ],
        "url": "https://api.lookproof.dev/v1/ip/range-to-cidr"
      },
      {
        "description": "Split an IPv4 or IPv6 CIDR block into subnets of a longer prefix, in order, at most 256 at a time; a larger split is refused before anything is computed. Offline. Use when an agent must plan an address layout or hand out subnets. Input: ?cidr=192.0.2.0/24&prefix=26.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "192.0.2.0/24",
            "group": "query",
            "name": "cidr",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": 26,
            "group": "query",
            "name": "prefix",
            "required": false,
            "type": "number"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "7",
          "l30DaysUniquePayers": "5"
        },
        "serviceName": "Lookproof",
        "tags": [
          "ip",
          "subnet",
          "cidr",
          "planning",
          "network"
        ],
        "url": "https://api.lookproof.dev/v1/ip/subnets"
      },
      {
        "description": "Check a domain's BIMI record (<selector>._bimi, default selector, with fallback to the organisational domain): v=BIMI1 syntax, HTTPS logo and certificate URLs, an SVG logo path and whether DMARC is enforced at quarantine or reject with pct=100. Use when an agent must tell why a brand logo does not show in mail clients. The logo and certificate are not downloaded.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "bimi",
          "branding"
        ],
        "url": "https://api.lookproof.dev/v1/mail/bimi"
      },
      {
        "description": "Parse a pasted BIMI record: v=BIMI1, the l= logo and a= certificate tags, repeated or missing tags, HTTPS URLs, the .svg logo path and a missing mark certificate. Offline: the logo and DMARC are not fetched. Use when an agent writes or reviews a BIMI record. Input: {\"record\": \"v=BIMI1; l=https://example.com/logo.svg\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem",
            "group": "body",
            "name": "record",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "bimi",
          "brand",
          "logo"
        ],
        "url": "https://api.lookproof.dev/v1/mail/bimi-parse"
      },
      {
        "description": "One report on a domain's mail setup: MX, SPF and DMARC, plus DKIM for the selectors you give, with coded findings and an overall status. Use when an agent needs a complete overview of a domain's email authentication and delivery configuration in one call instead of four.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": [],
            "group": "query",
            "name": "dkim_selectors",
            "required": false,
            "type": "array"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.03",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "spf",
          "dmarc"
        ],
        "url": "https://api.lookproof.dev/v1/mail/check"
      },
      {
        "description": "Run the mail configuration check (MX, SPF, DMARC) on up to 20 domains in one request. Results keep the input order, and items that fail for a technical reason come with a token for a free retry. Use when an agent must audit many domains at once, for example a customer list or a portfolio of brands.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": [],
            "group": "body",
            "name": "domains",
            "required": false,
            "type": "array"
          }
        ],
        "pricing": {
          "amount": "0.048",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "bulk",
          "audit"
        ],
        "url": "https://api.lookproof.dev/v1/mail/check/bulk"
      },
      {
        "description": "Fetch and validate the DKIM public key record at selector._domainkey for a domain: key type, key size, revocation and syntax, with coded findings. Use when an agent knows the selector (s= in a DKIM-Signature header) and must confirm that the key is published and usable. It does not verify message signatures.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          },
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "selector1",
            "group": "query",
            "name": "selector",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "dkim"
        ],
        "url": "https://api.lookproof.dev/v1/mail/dkim"
      },
      {
        "description": "Try 27 common DKIM selectors (Google, Microsoft 365, Mailchimp, SendGrid, Mailgun, Zoho, Proton, Fastmail, Mailjet, Amazon SES and generic names) for a domain and validate every key found: type, size, revocation and testing flag. Use when an agent needs a domain's DKIM keys but does not know the selector. Finding none is a hint, not proof that DKIM is missing.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "dkim",
          "selectors"
        ],
        "url": "https://api.lookproof.dev/v1/mail/dkim-discover"
      },
      {
        "description": "Look up the DMARC record of a domain or its organisational domain and explain policy, subdomain policy, alignment and reporting addresses, with coded findings. Use when an agent must tell whether a domain is protected against spoofing, which policy it enforces, or why DMARC reports do not arrive.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "dmarc"
        ],
        "url": "https://api.lookproof.dev/v1/mail/dmarc"
      },
      {
        "description": "Parse a pasted DMARC record without DNS (RFC 9989): p, sp, np, psd, t, adkim, aspf, rua and ruf, historic and unknown tags, with the same coded findings as the DMARC check, such as p=none or a missing report address. Use when an agent must check a DMARC record before publishing it. Input: {\"record\": \"v=DMARC1; p=none; rua=mailto:dmarc@example.com\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com; adkim=s",
            "group": "body",
            "name": "record",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "dmarc",
          "parser"
        ],
        "url": "https://api.lookproof.dev/v1/mail/dmarc-parse"
      },
      {
        "description": "Check a domain's MTA-STS setup (RFC 8461): the _mta-sts record, the HTTPS policy file with certificate check and no redirects, mode, max_age and whether every MX host is covered, plus the TLS-RPT record (RFC 8460). Use when an agent must tell whether inbound mail is protected against TLS downgrade, or why senders report MTA-STS failures for a domain.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "mta-sts",
          "tls"
        ],
        "url": "https://api.lookproof.dev/v1/mail/mta-sts"
      },
      {
        "description": "Parse a pasted MTA-STS policy file (RFC 8461) as a sending server would: version, mode, mx patterns and max_age, lines that do not parse, testing or none mode and a short max_age. Offline. Use when an agent writes an MTA-STS policy before publishing it. Input: {\"policy\": \"version: STSv1\\nmode: enforce\\n...\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "version: STSv1\nmode: testing\nmx: mx1.example.com\nmx: *.mail.example.com\nmax_age: 604800\n",
            "group": "body",
            "name": "policy",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "mta-sts",
          "tls",
          "policy"
        ],
        "url": "https://api.lookproof.dev/v1/mail/mta-sts-parse"
      },
      {
        "description": "List a domain's mail servers in preference order and detect null MX (RFC 7505) and MX targets that do not resolve, with coded findings. Use when an agent must find where mail for a domain is delivered or why a domain cannot receive mail.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "mx"
        ],
        "url": "https://api.lookproof.dev/v1/mail/mx"
      },
      {
        "description": "Name the mail providers a domain uses from its MX hosts and SPF include tree: the mailbox provider behind the primary MX, inbound gateways and sending services, matched against a fixed, versioned list with the matching names as evidence. Use when an agent must tell who hosts a domain's mail, which services may send for it, or whether SPF still authorises a provider the domain has left.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.005",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "mx",
          "spf",
          "providers"
        ],
        "url": "https://api.lookproof.dev/v1/mail/provider"
      },
      {
        "description": "Check reverse DNS for a domain's mail servers: up to five MX hosts, their IPv4 and IPv6 addresses, each PTR name and whether it resolves back to the same address (FCrDNS), with coded findings. Use when an agent must tell whether a domain's mail servers have matching reverse DNS, a common reason for rejected or spam-filed mail.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "ptr",
          "reverse-dns"
        ],
        "url": "https://api.lookproof.dev/v1/mail/ptr"
      },
      {
        "description": "Parse and evaluate a domain's SPF record: the include and redirect tree, qualifiers and the RFC 7208 limit of ten DNS lookups, with coded findings. Use when an agent must tell whether SPF is valid, why mail from a service fails SPF, or whether one more include would exceed the lookup limit.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "spf"
        ],
        "url": "https://api.lookproof.dev/v1/mail/spf"
      },
      {
        "description": "Unfold a domain's SPF policy (RFC 7208) into merged IPv4 and IPv6 blocks: include and redirect followed as a receiver counts them (10 lookups, 2 void lookups, PermError stops), a and mx resolved with /cidr, sources per block, exists, ptr and macros listed apart, and very broad blocks flagged. Use when an agent must know which servers may send. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "spf",
          "flatten"
        ],
        "url": "https://api.lookproof.dev/v1/mail/spf-flatten"
      },
      {
        "description": "Parse a pasted SPF record without DNS (RFC 7208): mechanisms with qualifiers and values, modifiers, syntax errors, the all policy and the number of terms that need DNS lookups, with coded findings such as +all, ptr and over ten lookups. Use when an agent must check an SPF record before publishing it. Input: {\"record\": \"v=spf1 mx include:_spf.example.com ~all\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "v=spf1 mx include:_spf.example.com ~all",
            "group": "body",
            "name": "record",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "spf",
          "parser"
        ],
        "url": "https://api.lookproof.dev/v1/mail/spf-parse"
      },
      {
        "description": "Read how far a domain's DMARC policy (RFC 9989) asks receivers to act on mail that fails it: none, partial or full, with the effective policy after test mode (t=y), the subdomain policy, pct, the SPF all qualifier and the gaps in plain words. Use when an agent must explain whether a domain asks receivers to stop forged mail. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "deliverability",
          "dmarc",
          "spoofing"
        ],
        "url": "https://api.lookproof.dev/v1/mail/spoofable"
      },
      {
        "description": "Check a domain's TLS-RPT record (RFC 8460) at _smtp._tls: one v=TLSRPTv1 record with exactly one rua tag of mailto: or https: report addresses. Use when an agent sets up or audits SMTP TLS reporting, alone or before MTA-STS. Input: ?domain=example.com.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "tls-rpt",
          "tls",
          "reporting"
        ],
        "url": "https://api.lookproof.dev/v1/mail/tlsrpt"
      },
      {
        "description": "Parse a pasted TLS-RPT record (RFC 8460): v=TLSRPTv1, exactly one rua tag and whether each report address is a mailto: or https: URI. Offline. Use when an agent sets up SMTP TLS reporting. Input: {\"record\": \"v=TLSRPTv1; rua=mailto:tlsrpt@example.com\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "v=TLSRPTv1; rua=mailto:tlsrpt@example.com,https://tlsrpt.example.com/v1",
            "group": "body",
            "name": "record",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "email",
          "dns",
          "tls-rpt",
          "tls",
          "reporting"
        ],
        "url": "https://api.lookproof.dev/v1/mail/tlsrpt-parse"
      },
      {
        "description": "One report on a website's security basics: the TLS certificate on port 443 (trust, name, expiry, key), the redirect chains from http:// and https:// with HSTS, CSP, frame protection, Referrer-Policy and cookie flags, and the domain's expiry and EPP statuses from RDAP, each as a section with coded findings. Use when an agent must audit a website or build a site health report; cheaper than the three checks one by one. No score is computed.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.025",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "website",
          "tls",
          "https",
          "security",
          "audit"
        ],
        "url": "https://api.lookproof.dev/v1/site/health"
      },
      {
        "description": "Check the TLS certificate a domain serves on port 443: whether it chains to a trusted root, matches the name (RFC 9525) and when it expires, with issuer, chain, key and signature algorithm, TLS version and coded findings for expired, expiring, untrusted, mismatched or weak certificates. Use when an agent must tell why HTTPS fails for a domain or when its certificate has to be renewed.",
        "method": "GET",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "example.com",
            "group": "query",
            "name": "domain",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "tls",
          "ssl",
          "certificates",
          "https",
          "security"
        ],
        "url": "https://api.lookproof.dev/v1/tls/certificate"
      },
      {
        "description": "Decode one pasted PEM certificate signing request (PKCS#10): subject, DNS and IP names, key type and size, signature algorithm and whether the signature matches the key. Email addresses are never returned. Offline. Use when an agent must check a CSR before sending it to a certificate authority. Input: {\"pem\": \"-----BEGIN CERTIFICATE REQUEST...\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "-----BEGIN CERTIFICATE REQUEST-----\nMIIBDzCBtgIBADAaMRgwFgYDVQQDDA93d3cuZXhhbXBsZS5jb20wWTATBgcqhkjO\nPQIBBggqhkjOPQMBBwNCAASYaBFVYf3ODOTflUCxvFDsM5JYUQi+lX/NiQHXhj8i\neWCINKAp3k2MFrjAsCXIYzDZt9kRgg8v6m4v7tBVmhQsoDowOAYJKoZIhvcNAQkO\nMSswKTAnBgNVHREEIDAegg93d3cuZXhhbXBsZS5jb22CC2V4YW1wbGUuY29tMAoG\nCCqGSM49BAMCA0gAMEUCID4KBezMJNy36Sj8p9NoYQDTus6ysKWT7yLaOxm5Vfa2\nAiEApYG7bF7p3rBwf7RghWBn+709OKTRM6jQhTmKnd96XXA=\n-----END CERTIFICATE REQUEST-----\n",
            "group": "body",
            "name": "pem",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "tls",
          "csr",
          "certificates",
          "pkcs10",
          "decoder"
        ],
        "url": "https://api.lookproof.dev/v1/tls/csr-decode"
      },
      {
        "description": "Decode one pasted PEM X.509 certificate: subject, issuer, validity and days left, DNS and IP names, key type and size, signature algorithm, CA flag, key usages, self-signed, and SHA-256 and SHA-1 fingerprints. Email addresses are never returned. Offline: no chain or revocation check. Use when an agent must inspect a certificate file before installing it. Input: {\"pem\": \"-----BEGIN CERTIFICATE...\"}.",
        "method": "POST",
        "parameters": [
          {
            "default": null,
            "description": "",
            "enumValues": [],
            "example": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
            "group": "body",
            "name": "pem",
            "required": false,
            "type": "string"
          }
        ],
        "pricing": {
          "amount": "0.002",
          "currency": "USDC",
          "maxAmount": "",
          "minAmount": "",
          "network": "eip155:8453",
          "scheme": "exact"
        },
        "providerName": "",
        "quality": {
          "l30DaysTotalCalls": "1",
          "l30DaysUniquePayers": "1"
        },
        "serviceName": "Lookproof",
        "tags": [
          "tls",
          "certificates",
          "x509",
          "pem",
          "decoder"
        ],
        "url": "https://api.lookproof.dev/v1/tls/pem-decode"
      }
    ],
    "enriched": false,
    "iconUrl": "",
    "id": "api-lookproof-dev",
    "integrationType": "",
    "isNew": false,
    "name": "api.lookproof.dev",
    "networks": [
      "Base"
    ],
    "priceSummary": {
      "avgCostBasis": "exact",
      "avgCostPerTransaction": "0.010362",
      "currency": "USDC",
      "maxAmount": "0.08",
      "minAmount": "0.002"
    },
    "provider": "api.lookproof.dev",
    "providerUrl": "",
    "serviceName": "Lookproof",
    "tags": [
      "dns",
      "caa",
      "tls",
      "certificates",
      "security",
      "resolvers",
      "propagation",
      "dnssec",
      "compare",
      "ds",
      "dnskey",
      "https",
      "svcb",
      "http3",
      "ech",
      "idn",
      "punycode",
      "unicode",
      "homograph",
      "lookup",
      "records",
      "ttl",
      "nameservers",
      "ns",
      "redundancy",
      "delegation",
      "hosting",
      "provider",
      "soa",
      "zone",
      "secondary",
      "cache",
      "txt",
      "verification",
      "audit",
      "wildcard",
      "subdomains",
      "mx",
      "lint",
      "bind",
      "domain",
      "email",
      "rdap",
      "whois",
      "expiry",
      "registrar",
      "http",
      "cookies",
      "headers",
      "session",
      "csp",
      "xss",
      "hsts",
      "ip",
      "cidr",
      "subnet",
      "network",
      "calculator",
      "allowlist",
      "firewall",
      "ipv6",
      "classification",
      "offline",
      "range",
      "planning",
      "deliverability",
      "bimi",
      "branding",
      "brand",
      "logo",
      "spf",
      "dmarc",
      "bulk",
      "dkim",
      "selectors",
      "parser",
      "mta-sts",
      "policy",
      "providers",
      "ptr",
      "reverse-dns",
      "flatten",
      "spoofing",
      "tls-rpt",
      "reporting",
      "website",
      "ssl",
      "csr",
      "pkcs10",
      "decoder",
      "x509",
      "pem"
    ]
  },
  "source": "agentic_market",
  "summary": ""
}

What the leaf hashes

{"body":"7adfd6e81e609c1f469db9af9976cd581a0a8a659ccd5f4c6a545f1f0a457f17","id":1504032,"kind":"listing","method":"sync.agentic_market/1","observed_us":1793470668212215,"prev":1035841,"subject":"agentic_market:api-lookproof-dev","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (246033 rows).

  1. 0xae4ead1311787633ddcece4dbe154bd1177afd60fd88b134fea10870e3f19bda
  2. 0x8087aa63b16b7fd8c1b4ecf01e060c94f7c8418fae189a356ce65beca59bdaf9
  3. 0x38c60aeb044ad0cdbd91cda5964a5df6f17aff618f452483b1ceaaa6571247c6
  4. 0x1c0a5d030fc499fa499cf12c35174c7f738540aaf0dd7777368c6c70bd9a58d6
  5. 0x86e6cd5cf6ff61051a5a652e4df660a4408f51f5d7449df1c5306288cfde289d
  6. 0xd44b3d07a9128b9c8f67abecdf87fc0ff3289ea8f4dc45c957682f54b2705aa4
  7. 0x72f01caa406154f86933dbfbd92879c12705e7707f3bf8741e4403ec811bce70
  8. 0x4dfaef8838da8f1111da76ba6696428358d3478c994c4e9c69afac0aa158d36b
  9. 0xe982ac60b41dcd59d1d530e0b72fd26547c4ce3d9d35a589bd51a22d08650d7a
  10. 0xa9501ca87fcf858180f8dc1df7cdfae5b13f3f024e44218dfc1b9d3672115bb4
  11. 0x514499a2e09619b86e7ed1db689750d97d3f8424cdd40c78bcb8597fc36a394c
  12. 0x34ebe35e665c8ad4cfee030a83512f81e33c32db411169ebb250ec39780fa4c8
  13. 0x0b806489de9a06dcb3c577117e5b9b04eba4220a7b621a2fa8d84dafcbb2eb4e
  14. 0x17b4d08af91ab833713ac6154ec68f498dbe032401780285c2ccdadad6ac27f1
  15. 0x57afe240b626bf60f6af8c76404811e95ea5519f217fac382bd159177a8ec870
  16. 0x2e1cd25ce4079da9bfa6219d7ffec992149add4cd7d5c5b2cfee9908c1c8a5dd
  17. 0x50003b3c3045b653f8be4232e95e80582cf5c54c14c509ba0a9a197b9e5005cb
  18. 0x0504a25438f3c7932125463198ca74c5064f23f71a5c92763b3fc96a98cc8b57
Day root
0x24463725d1c0d9894bd6123691d532547aaa79f0762c0e45aa6a68acf1fd71ab
Chained
0x7d4824ff313dee7252a46f9d5c37b452851deb6c9f24a40c2f74ee0e53c82980
Published
On Arc Testnet, block 70093156: 0xedb7b832f4ebf6781b5ecd2ed241c435b862f4d3761541fa31adc1831b8c44a0

How to check it · This row as JSON