{"description":"Email, DNS and website security checks for developers and AI agents (TLS certificates, security headers, RDAP), paid per request with x402 in USDC.","docs":"https://lookproof.dev/docs/api","kind":"resource-server","name":"Lookproof","resources":[{"description":"Show which certificate authorities may issue for a domain, from its CAA records.","method":"GET","url":"https://api.lookproof.dev/v1/dns/caa"},{"description":"Ask Cloudflare and Google the same DNS question and compare their answers.","method":"GET","url":"https://api.lookproof.dev/v1/dns/compare"},{"description":"Report whether a domain is DNSSEC-signed and validates, from the resolvers' AD flag.","method":"GET","url":"https://api.lookproof.dev/v1/dns/dnssec"},{"description":"Read a name's HTTPS records (RFC 9460): alpn, port, address hints, ECH and AliasMode.","method":"GET","url":"https://api.lookproof.dev/v1/dns/https-rr"},{"description":"Convert a domain name between Unicode and punycode and check it against IDNA2008.","method":"GET","url":"https://api.lookproof.dev/v1/dns/idn"},{"description":"Resolve selected record types with TTL and the resolver that answered.","method":"GET","url":"https://api.lookproof.dev/v1/dns/lookup"},{"description":"Check a zone's name servers: how many, whether they resolve and how diverse they are.","method":"GET","url":"https://api.lookproof.dev/v1/dns/ns"},{"description":"Find out which DNS provider hosts a domain, from the names of its name servers.","method":"GET","url":"https://api.lookproof.dev/v1/dns/ns-provider"},{"description":"Check a zone's SOA record: serial format, refresh, retry, expire and negative TTL.","method":"GET","url":"https://api.lookproof.dev/v1/dns/soa"},{"description":"See the TTL of a name's A, AAAA, MX, NS, TXT, CAA and SOA records, exact when signed and validated.","method":"GET","url":"https://api.lookproof.dev/v1/dns/ttl"},{"description":"List the domain verification tokens in a domain's TXT records, such as Google's or MS=.","method":"GET","url":"https://api.lookproof.dev/v1/dns/txt-verification"},{"description":"Find out whether a zone answers for names that do not exist (wildcard records).","method":"GET","url":"https://api.lookproof.dev/v1/dns/wildcard"},{"description":"Check a pasted zone file: syntax, SOA and NS at the apex, CNAME rules, duplicates, TTLs.","method":"POST","url":"https://api.lookproof.dev/v1/dns/zone-lint"},{"description":"One report on a domain's mail and DNS security: nine checks with coded findings.","method":"GET","url":"https://api.lookproof.dev/v1/domain/health"},{"description":"Look up a domain's registrar, expiry date, EPP statuses and nameservers over RDAP.","method":"GET","url":"https://api.lookproof.dev/v1/domain/rdap"},{"description":"Parse a pasted Set-Cookie header: Secure, HttpOnly, SameSite, prefixes and lifetime.","method":"POST","url":"https://api.lookproof.dev/v1/http/cookie-parse"},{"description":"Parse a pasted Content-Security-Policy: unsafe sources, wildcards and missing directives.","method":"POST","url":"https://api.lookproof.dev/v1/http/csp-parse"},{"description":"Parse a pasted Strict-Transport-Security value: max-age, subdomains and preload rules.","method":"POST","url":"https://api.lookproof.dev/v1/http/hsts-parse"},{"description":"Check HTTP to HTTPS redirects, HSTS, CSP and the other security headers of a site.","method":"GET","url":"https://api.lookproof.dev/v1/http/security-headers"},{"description":"Show a CIDR block's network, first and last address, size, netmask and host bits.","method":"GET","url":"https://api.lookproof.dev/v1/ip/cidr"},{"description":"Tell which of up to 100 CIDR blocks contain an IP address.","method":"POST","url":"https://api.lookproof.dev/v1/ip/contains"},{"description":"Show an address's version, both IPv6 forms, its special-purpose scope and .arpa name.","method":"GET","url":"https://api.lookproof.dev/v1/ip/info"},{"description":"Turn a start and end address into the smallest list of CIDR blocks that covers it.","method":"GET","url":"https://api.lookproof.dev/v1/ip/range-to-cidr"},{"description":"Split a CIDR block into subnets of a longer prefix, at most 256 at a time.","method":"GET","url":"https://api.lookproof.dev/v1/ip/subnets"},{"description":"Check a domain's BIMI record, its logo and certificate URLs, and DMARC enforcement.","method":"GET","url":"https://api.lookproof.dev/v1/mail/bimi"},{"description":"Parse a pasted BIMI record: tags, the logo and certificate URLs and their rules.","method":"POST","url":"https://api.lookproof.dev/v1/mail/bimi-parse"},{"description":"One report covering MX, SPF, DMARC and DKIM for known selectors.","method":"GET","url":"https://api.lookproof.dev/v1/mail/check"},{"description":"Run the mail configuration check on up to 20 domains in one request.","method":"POST","url":"https://api.lookproof.dev/v1/mail/check/bulk"},{"description":"Check the DKIM public key record for a given selector.","method":"GET","url":"https://api.lookproof.dev/v1/mail/dkim"},{"description":"Try 31 common DKIM selectors for a domain and check every key that is found.","method":"GET","url":"https://api.lookproof.dev/v1/mail/dkim-discover"},{"description":"Look up and explain a domain's DMARC policy and tags.","method":"GET","url":"https://api.lookproof.dev/v1/mail/dmarc"},{"description":"Parse a pasted DMARC record: policies, alignment, report addresses and unknown tags.","method":"POST","url":"https://api.lookproof.dev/v1/mail/dmarc-parse"},{"description":"Check the MTA-STS record and policy file, MX coverage, and the TLS-RPT record.","method":"GET","url":"https://api.lookproof.dev/v1/mail/mta-sts"},{"description":"Parse a pasted MTA-STS policy file: version, mode, mx patterns and max_age.","method":"POST","url":"https://api.lookproof.dev/v1/mail/mta-sts-parse"},{"description":"List a domain's mail servers with priorities, including null MX.","method":"GET","url":"https://api.lookproof.dev/v1/mail/mx"},{"description":"Name the mailbox provider, gateways and sending services a domain uses, from MX and SPF.","method":"GET","url":"https://api.lookproof.dev/v1/mail/provider"},{"description":"Check PTR records and forward confirmation (FCrDNS) for a domain's MX addresses.","method":"GET","url":"https://api.lookproof.dev/v1/mail/ptr"},{"description":"Parse and evaluate a domain's SPF policy, including the DNS lookup budget.","method":"GET","url":"https://api.lookproof.dev/v1/mail/spf"},{"description":"Unfold a domain's SPF policy into the IPv4 and IPv6 blocks it lets pass.","method":"GET","url":"https://api.lookproof.dev/v1/mail/spf-flatten"},{"description":"Parse a pasted SPF record: terms, qualifiers, syntax errors and its own lookup count.","method":"POST","url":"https://api.lookproof.dev/v1/mail/spf-parse"},{"description":"See how far a domain's DMARC policy asks receivers to act on forged mail.","method":"GET","url":"https://api.lookproof.dev/v1/mail/spoofable"},{"description":"Check a domain's TLS-RPT record and where reports on failed TLS deliveries go.","method":"GET","url":"https://api.lookproof.dev/v1/mail/tlsrpt"},{"description":"Parse a pasted TLS-RPT record: version and the mailto: or https: report addresses.","method":"POST","url":"https://api.lookproof.dev/v1/mail/tlsrpt-parse"},{"description":"One report on a site's TLS certificate, HTTPS redirects, security headers and domain expiry.","method":"GET","url":"https://api.lookproof.dev/v1/site/health"},{"description":"Check the certificate a domain serves on port 443: expiry, name, chain and key.","method":"GET","url":"https://api.lookproof.dev/v1/tls/certificate"},{"description":"Decode a pasted certificate signing request: names, key and whether the signature holds.","method":"POST","url":"https://api.lookproof.dev/v1/tls/csr-decode"},{"description":"Decode a pasted X.509 certificate: names, dates, key, signature and fingerprints.","method":"POST","url":"https://api.lookproof.dev/v1/tls/pem-decode"}],"x402Version":2}