llms.txt
+51 −4
https://verifypulse-seven.vercel.app/llms.txt
− DMARC policy including inheritance from the parent domain, DKIM keys found, fixes, and a `snapshot`.− Call without payment to receive an HTTP 402 with the payment requirements.− Send the returned pass as the X-Guard-Pass header. With a pass, audit and diff accept 20 domains per request.− inspect_domain_dns, audit_sending_domains, monitor_sending_domains, flatten_spf (all free), verify_email (paid).+ DMARC policy including inheritance from the parent domain, DKIM keys found, MTA-STS (policy fetched and+ checked against your MX hosts), TLS-RPT and BIMI, fixes, and a `snapshot`.+ POST /v1/guard/watch+ Body: {"domains": ["example.com"], "webhook_url": "https://hooks.example.com/..."} (up to 3 domains free; more with X-Guard-Pass)+ Hosted monitoring: the server stores the domains and their last good snapshot and checks them once a day,+ including domain registration and website certificate expiry (alerts at 30, 7 and 1 days).+ When SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT or BIMI change, it POSTs {"type": "changes", "changes": [...], "text": "..."} to webhook_url,+ signed with HMAC-SHA256 of the body in the X-VerifyPulse-Signature header (key: `signing_secret` from registration).+ A lookup that does not answer in full is retried the next day and never reported as a change.+ webhook_url must be https and resolve to a public address. Free watches last 30 days; register again to renew.+ Slack (hooks.slack.com) and Discord (discord.com/api/webhooks) URLs get a chat message instead of the JSON.+ Returns a `token`. GET /v1/guard/watch and DELETE /v1/guard/watch/{id} take it as the X-Watch-Token header.+ POST /v1/guard/watch/{id}/test sends a sample alert now (5 a day) and returns what the webhook answered.+ It does not send email.+ Limits: domain intel, TLS, blocklist and email-analysis lookups allow 60 calls an hour per IP address, 600 with an+ X-API-Key; past that they answer 429 with Retry-After. The paid list endpoints below have no such limit.+ GET /v1/domain/intel?domain=example.com+ Registration date and age in days, expiry, registrar, status, nameservers and DNSSEC from the registry (RDAP).+ Flags domains registered in the last 30 days and domains about to expire.+ GET /v1/tls/check?host=example.com+ The TLS certificate on port 443: whether it validates, issuer, names covered, expiry and days left.+ GET /v1/blocklist/check?target=203.0.113.7 (or ?target=example.com for its MX and A addresses)+ SpamCop and PSBL listings. Spamhaus and Barracuda are not queried (their terms require a subscription).+ POST /v1/email/analyze+ Body: {"raw": "<the message source, or just its headers>"}+ Why it passed or failed: DKIM signatures (verified when the body is included), whether the sending IP is+ authorized by SPF, DMARC alignment and policy, what the receiver recorded, delays at each hop, and the reasons.+ Call without payment to receive an HTTP 402 with the payment requirements. With a payment attached, bad+ input is refused with 400 before anything is settled. A settled call returns the receipt (transaction hash)+ in the PAYMENT-RESPONSE header. If a payment is refused, the 402 says why (for example insufficient_funds).+ - GET /v1/x402/domain-intel?domains=a.com,b.com $0.02 (up to 20 domains)+ - GET /v1/x402/tls-check?hosts=a.com,b.com $0.02 (up to 20 hosts)+ ## Credits (pay once, then use an API key)+ One credit is $0.001. An address check (POST /v1/verify, a CSV row, MCP verify_email) costs 1 credit; any+ x402 endpoint above, called with X-API-Key instead of a payment, costs its price in credits ($0.02 = 20).+ Credits never expire; every pack is one-time and adds to the balance.+ - GET /v1/x402/credits?pack=1000 $1 for 1,000 credits; pack=5000: $5 for 5,000+ Returns an API key, or tops up the one sent as X-API-Key.+ - POST /api/checkout/crypto-verify Body: {"tx_hash": "0x...", "pack": "micro"} after a USDC transfer on Base to+ 0x42871B99A3AA942D3B8EC7E43D37979886E856cA: micro $3 = 3,000 credits, starter $7 = 7,000, pro $19 = 19,000, scale $49 = 49,000.
