x402 · Base Mainnet · 6 endpoints live

Verification
intelligence
for agents.

Six x402-powered APIs at api.trustsource.cc that autonomous AI agents use before they transact. A one-call CLEAR/REVIEW/BLOCK URL safety verdict. Email spoofability grading. Domain trust scoring. SSL certificate intelligence. HTTP security header audits. Robots.txt and AI bot policy detection. No API keys. Pay per query in USDC.

View on Agentic.Market Explore APIs OpenAPI Spec
6
Live APIs
$0.002–.01
USDC per query
0ms
API key setup
1–12h
Result cache
// Six endpoints

Verify anything
before you transact.

Each endpoint solves one specific verification need. They share a wallet, share an OpenAPI spec, and stack naturally — your agent can chain them together to get a complete picture of any target. Start with /urlcheck for a single go/no-go verdict, then drill into any signal.

GET /urlcheck $0.01 USDC
UrlCheck
One call, one CLEAR / REVIEW / BLOCK verdict on any URL — fuses domain trust, a live TLS check, and typosquat/lookalike-brand detection into a single graded answer with reasons. The go/no-go your agent gates on.
Learn more →
GET /emailtrust $0.003 USDC
EmailTrust
Email-authentication posture grade (SPF, DKIM, DMARC, BIMI, MX). Tells your agent whether a sender domain can be spoofed, returns an A–F grade, and flags every misconfiguration.
Learn more →
GET /trustscore $0.003 USDC
TrustScore
Domain trust scoring via WHOIS age, TLD risk, DNS presence, registrar reputation. Returns 0–100 score with TRUSTED/MODERATE/CAUTION/HIGH_RISK tier.
Learn more →
GET /sslcheck $0.002 USDC
SslCheck
Live TLS handshake analysis — certificate chain, expiry, trusted CA detection, signature strength, TLS 1.2/1.3 protocol check. Returns 0–100 score plus warnings.
Learn more →
GET /headers $0.003 USDC
Headers
HTTP security header audit — HSTS, CSP, X-Frame-Options, Referrer-Policy, COOP, server disclosure. Returns A+ to F letter grade with structured analysis.
Learn more →
GET /robots $0.002 USDC
Robots
robots.txt parsing plus AI bot policy detection across 24 known crawlers (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, and more). Sitemap discovery included.
Learn more →
GET https://api.trustsource.cc/urlcheck?url=https://example.com

UrlCheck

The one call an agent makes before it clicks, fetches, submits data to, or pays a link. Fuses domain trust (WHOIS age, TLD risk, DNS, registrar), a live TLS certificate check, and typosquat / lookalike-brand detection into a single CLEAR / REVIEW / BLOCK verdict with a 0–100 score and human-readable reasons — so your agent gates on one answer instead of running and interpreting several checks itself.

Domain trust (WHOIS · TLD · DNS · registrar)fused
Live TLS certificate validityfused
Typosquat / lookalike-brand detectionfused
Newly-registered domain flagfused
CLEARsafe to proceed
REVIEWinspect before acting
BLOCKdo not proceed
{ "domain": "paypa1.com", "verdict": "BLOCK", "score": 12, "reasons": [ "possible lookalike of paypal.com" ], "signals": { "domainTrust": { "tier": "HIGH_RISK" }, "tls": { "reachable": true, "tier": "VALID" }, "typosquat": { "isLookalike": true, "nearestBrand": "paypal.com" } } }
GET https://api.trustsource.cc/emailtrust?domain=example.com

EmailTrust

Grade a domain's email-authentication posture from DNS alone — SPF, DKIM, DMARC, BIMI, and MX. Returns an A–F grade, a spoofable flag, the parsed DMARC policy and SPF qualifier, and every misconfiguration. Use it to judge a sender before trusting an email, or to confirm your own outreach domain won't be silently rejected by Gmail, Yahoo, and Microsoft's 2026 authentication rules.

SPF policy & qualifier-all / ~all
DMARC enforcement (p=)none / quarantine / reject
DKIM key presencebest-effort
BIMI & MX recordspresent?
A / Benforced — not spoofable
C / Dmonitoring only — spoofable
Fno authentication
{ "domain": "example.com", "grade": "C", "spoofable": true, "spf": { "present": true, "qualifier": "~all" }, "dmarc": { "present": true, "policy": "none" }, "dkim": { "present": true }, "issues": [ "dmarc_p_none_no_enforcement" ] }
GET https://api.trustsource.cc/trustscore?domain=example.com

TrustScore

Domain trust scoring built on four signals: WHOIS registration age, TLD risk category, DNS resolution and mail records, and registrar reputation. Returns structured JSON your agent can act on directly.

Domain age (WHOIS)0 – 30 pts
TLD risk classification0 – 20 pts
DNS presence (A + MX)0 – 30 pts
Registrar reputation10 – 20 pts
TRUSTED75 – 100
MODERATE50 – 74
CAUTION25 – 49
HIGH_RISK0 – 24
{ "domain": "google.com", "score": 90, "tier": "TRUSTED", "breakdown": { "domainAge": 30, "tld": 20, "dnsPresence": 30, "registrar": 10 }, "details": { "age": { "days": 10477, "label": "established" }, "tld": ".com", "dns": { "hasARecord": true, "hasMxRecord": true }, "registrar": "markmonitor" } }
GET https://api.trustsource.cc/sslcheck?domain=example.com

SslCheck

Live TLS handshake analysis. Walks the full certificate chain, detects trusted root CAs (Let's Encrypt, DigiCert, Cloudflare, GlobalSign, MarkMonitor, and more), validates expiry, scores crypto strength from the cipher suite, and grades modernity by TLS version.

Chain validity0 – 30 pts
Trusted CA0 – 25 pts
Not expired0 – 25 pts
Strong crypto0 – 10 pts
Modern TLS (1.2 / 1.3)0 – 10 pts
VALID75 – 100
WEAKbelow 70
EXPIRING< 7 days left
UNTRUSTEDself-signed
INVALIDchain failure
EXPIREDpast validTo
{ "domain": "google.com", "score": 100, "tier": "VALID", "breakdown": { "chainValid": 30, "trustedCa": 25, "notExpired": 25, "strongCrypto": 10, "modernTls": 10 }, "certificate": { "issuer": "Google Trust Services", "daysRemaining": 66, "isSelfSigned": false }, "connection": { "protocol": "TLSv1.3" } }
GET https://api.trustsource.cc/headers?url=https://example.com

Headers

HTTP security header analyzer. Fetches the target URL, parses response headers, and grades the site's security posture across eight dimensions. Returns a letter grade (A+ to F) plus a 0–100 score and per-header analysis with specific warnings.

HSTS (Strict-Transport-Security)0 – 20 pts
Content Security Policy0 – 20 pts
X-Frame-Options0 – 10 pts
X-Content-Type-Options0 – 10 pts
Referrer-Policy0 – 10 pts
Permissions-Policy0 – 10 pts
Cross-Origin-Opener-Policy0 – 10 pts
Server header disclosure0 – 10 pts
A+90 – 100
A80 – 89
B70 – 79
C50 – 69
D30 – 49
Fbelow 30
{ "url": "https://example.com", "grade": "A", "score": 82, "maxScore": 100, "analysis": { "hsts": { "present": true, "score": 20 }, "csp": { "present": true, "score": 18 }, "xFrameOptions": { "present": true, "score": 10 } }, "warnings": ["missing_permissionsPolicy"] }
GET https://api.trustsource.cc/robots?domain=example.com

Robots

robots.txt parser with structured AI bot policy analysis. Detects which of 24 known AI training crawlers — GPTBot, ClaudeBot, Google-Extended, PerplexityBot, Bytespider, CCBot, Applebot-Extended, and more — are blocked, partially restricted, or fully permitted. Sitemap URLs extracted automatically.

User-agent group parsingstructured
Allow / disallow rulesper UA
Crawl-delay extractionwhen set
AI bot policy mapping24 bots
Sitemap discoveryall URLs
OPENno AI restrictions
SELECTIVEsome bots restricted
BLOCKED_AImost AI bots blocked
BLOCKED_ALLall crawlers blocked
NO_ROBOTS_TXTno file (open by default)
{ "domain": "example.com", "exists": true, "tier": "OPEN", "aiFriendly": true, "ai": { "knownBotsChecked": 24, "knownBotsBlocked": 0, "knownBotsPartial": 0 }, "sitemaps": [ "https://example.com/sitemap.xml" ], "summary": { "userAgentGroups": 6, "sitemaps": 1 } }
// Unified pricing
Per query
$0.002 – $0.003 USDC
Protocol
x402 / Base Mainnet
API key required
None

One wallet.
Four endpoints.

No signup. No API key. Discoverable on Agentic.Market.

View on Agentic.Market OpenAPI Spec hello@trustsource.cc