Roundhouse

Cian Endpoint Audit

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a stable id, a severity and a fix.

SocialLiveeip155:8453Exactvia facilitator:payAI
http://45-127-35-121.sslip.io:8080/v1/dns-audit
DnsEmailSpfDmarcSecurity
Settlements · 30d
4
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days.
$0.04
Verified settled volume
4 settlements proven x402 by their on-chain EIP-3009 marker.
$0.010
Listed price
As published in the catalog. Always read the live 402 before paying.
—
Calls · 30d
Upstream's own call count for this endpoint, not ours.
—
Unique payers · 30d
Never called
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x7373E88368378052EB5a449d2eBC95aD7E5f2bEF

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "PAYMENT-SIGNATURE header is required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7373E88368378052EB5a449d2eBC95aD7E5f2bEF",
      "amount": "10000",
      "scheme": "exact",
      "network": "eip155:8453",
      "resource": "https://cian-x402.netlify.app/v1/dns-audit",
      "maxTimeoutSeconds": 60
    }
  ],
  "resource": {
    "url": "https://cian-x402.netlify.app/v1/dns-audit",
    "tags": [
      "dns",
      "email",
      "spf",
      "dmarc",
      "security",
      "audit",
      "monitoring"
    ],
    "mimeType": "application/json",
    "description": "DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a stable id, a severity and a fix.",
    "serviceName": "Cian DNS & Email Auth Audit"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "domain": "example.com"
          },
          "discoverable": true
        },
        "output": {
          "type": "json",
          "example": {
            "domain": "example.com",
            "checked": [
              "A",
              "AAAA",
              "NS",
              "MX",
              "TXT",
              "DMARC",
              "DKIM",
              "CAA",
              "DNSSEC"
            ],
            "evidence": {
              "a": [
                "104.20.23.154",
                "172.66.147.243"
              ],
              "mx": [
                "0 ."
              ],
              "ns": [
                "a.iana-servers.net.",
                "b.iana-servers.net."
              ],
              "caa": [],
              "txt": [
                "v=spf1 -all"
              ],
              "dmarc": [
                "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s"
              ],
              "dnssec_ad": true,
              "dkim_selectors_found": []
            },
            "findings": [
              {
                "id": "dmarc_no_rua",
                "fix": "add rua=mailto:dmarc@example.com",
                "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries",
                "severity": "low"
              },
              {
                "id": "no_caa",
                "fix": "publish CAA: 0 issue \"letsencrypt.org\"",
                "detail": "no CAA record: any public CA may issue a certificate for this domain",
                "severity": "low"
              },
              {
                "id": "null_mx",
                "detail": "a null MX is published: the domain explicitly accepts no mail",
                "severity": "info"
              }
            ],
            "audited_at": "2026-10-23T17:20:32Z",
            "finding_count": 3,
            "severity_counts": {
              "low": 2,
              "info": 1
            }
          }
        }
      },
      "schema": {
        "type": "object",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method",
              "discoverable"
            ],
            "properties": {
              "type": {
                "const": "http"
              },
              "method": {
                "const": "GET"
              },
              "queryParams": {
                "type": "object",
                "additionalProperties": {
                  "type": "string"
                }
              },
              "discoverable": {
                "const": true
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.01USDC≈ $0.01 USD
on Base · exact scheme

Pay 0.01 USDC on Base to 0x7373…f2bEF. The signed payment is good for 1 minute.

Paid to
0x7373…f2bEF
USD Coin contract
0x8335…02913
Payment window
1 minute
As published
10000 smallest units
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x7373E88368378052EB5a449d2eBC95aD7E5f2bEF",
    "amount": "10000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 60
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "domain": "example.com"
        },
        "discoverable": true
      },
      "output": {
        "type": "json",
        "example": {
          "domain": "example.com",
          "checked": [
            "A",
            "AAAA",
            "NS",
            "MX",
            "TXT",
            "DMARC",
            "DKIM",
            "CAA",
            "DNSSEC"
          ],
          "evidence": {
            "a": [
              "104.20.23.154",
              "172.66.147.243"
            ],
            "mx": [
              "0 ."
            ],
            "ns": [
              "a.iana-servers.net.",
              "b.iana-servers.net."
            ],
            "caa": [],
            "txt": [
              "v=spf1 -all"
            ],
            "dmarc": [
              "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s"
            ],
            "dnssec_ad": true,
            "dkim_selectors_found": []
          },
          "findings": [
            {
              "id": "dmarc_no_rua",
              "fix": "add rua=mailto:dmarc@example.com",
              "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries",
              "severity": "low"
            },
            {
              "id": "no_caa",
              "fix": "publish CAA: 0 issue \"letsencrypt.org\"",
              "detail": "no CAA record: any public CA may issue a certificate for this domain",
              "severity": "low"
            },
            {
              "id": "null_mx",
              "detail": "a null MX is published: the domain explicitly accepts no mail",
              "severity": "info"
            }
          ],
          "audited_at": "2026-10-23T17:20:32Z",
          "finding_count": 3,
          "severity_counts": {
            "low": 2,
            "info": 1
          }
        }
      }
    },
    "schema": {
      "type": "object",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "discoverable"
          ],
          "properties": {
            "type": {
              "const": "http"
            },
            "method": {
              "const": "GET"
            },
            "queryParams": {
              "type": "object",
              "additionalProperties": {
                "type": "string"
              }
            },
            "discoverable": {
              "const": true
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-10-23 17:22Z
Last indexed by Roundhouse
2026-10-26 13:16Z
Last enriched (probe, favicon, geo)
2026-10-23 23:15Z
x402 version
2
Max timeout
60s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service Cian Endpoint Audit and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Cian%20Endpoint%20Audit'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at http://45-127-35-121.sslip.io:8080/v1/dns-audit, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.