API reference
Every Lookproof check is an HTTP endpoint, paid per request with x402 in USDC. No account, no API key and no subscription.
Examples use the Base (eip155:8453) network.
Updated 2026-10-09
DNS
| Endpoint | Method and path | Price |
|---|---|---|
| CAA record check | GET /v1/dns/caa | $0.01 per request |
| DNSSEC check | GET /v1/dns/dnssec | $0.01 per request |
| DNS lookup | GET /v1/dns/lookup | $0.005 per request |
Domains
| Endpoint | Method and path | Price |
|---|---|---|
| Domain health check | GET /v1/domain/health | $0.08 per request |
| RDAP domain lookup | GET /v1/domain/rdap | $0.01 per request |
HTTP
| Endpoint | Method and path | Price |
|---|---|---|
| Security headers check | GET /v1/http/security-headers | $0.01 per request |
| Endpoint | Method and path | Price |
|---|---|---|
| BIMI record check | GET /v1/mail/bimi | $0.01 per request |
| Mail configuration check | GET /v1/mail/check | $0.03 per request |
| Bulk mail configuration check | POST /v1/mail/check/bulk | $0.024 per item, minimum $0.03 per request, at most 20 items |
| DKIM record check | GET /v1/mail/dkim | $0.01 per request |
| DKIM selector finder | GET /v1/mail/dkim-discover | $0.02 per request |
| DMARC check | GET /v1/mail/dmarc | $0.01 per request |
| MTA-STS and TLS-RPT check | GET /v1/mail/mta-sts | $0.02 per request |
| MX lookup | GET /v1/mail/mx | $0.01 per request |
| Mail provider detection | GET /v1/mail/provider | $0.005 per request |
| Reverse DNS check for mail servers | GET /v1/mail/ptr | $0.01 per request |
| SPF check | GET /v1/mail/spf | $0.01 per request |
| Free retry of failed bulk items | POST /v1/mail/check/bulk/retry | Free |
Sites
| Endpoint | Method and path | Price |
|---|---|---|
| Site health check | GET /v1/site/health | $0.025 per request |
TLS
| Endpoint | Method and path | Price |
|---|---|---|
| TLS certificate check | GET /v1/tls/certificate | $0.01 per request |
Payment
A request without payment is answered with 402 Payment Required and the exact price. An x402 client signs the payment and sends the same request again with the PAYMENT-SIGNATURE header. Only ordinary wallets (EOA) can pay: a smart-contract wallet signature (ERC-1271 or ERC-6492) gets a 402 that says so, and nothing is charged. See payments.
Response envelope
| Field | Meaning |
|---|---|
request_id | Unique id of this request. Quote it when you contact support. |
endpoint | The endpoint id, for example mail.spf. |
schema_version | Version of the response format, currently 1.0. |
checked_at | When the check ran (ISO 8601, UTC). |
status | ok, info, warning or error from the worst finding, or unknown when the check was incomplete. unknown is not an error in the domain. |
data | The check's own data. Its fields are listed below. |
findings | What was found: code, severity, message, explanation and evidence. |
meta | Duration, cache use, resolver and how long the result stays fresh. |
Errors
Errors other than 402 share one JSON body with error, message, request_id and details. You are never charged for an error. See errors.