CommsHarbor

CommsHarbor: email security audit of a domain (SPF, DKIM, DMARC, MX and a score), paid per call

DataLiveeip155:8453Exactvia cdp
EmailMailbox-management
Calls · 30d
5
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far.
$30.61
Verified settled volume
135 settlements proven x402 by their on-chain EIP-3009 marker.
$0.010
Listed price
As published in the catalog. Always read the live 402 before paying.
5
Calls · 30d
Upstream's own call count for this endpoint, not ours.
3
Unique payers · 30d
Last called 2026-10-25 19:57Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x7c22D10a957c62044d03dB5C0086f500Fc645a26

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "name": "CommsHarbor",
  "error": "Payment required: PAYMENT-SIGNATURE (v2) or X-PAYMENT (v1)",
  "action": "email_check_call",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7c22D10a957c62044d03dB5C0086f500Fc645a26",
      "scheme": "exact",
      "network": "base",
      "mimeType": "application/json",
      "resource": "https://commsharbor.com/api/x402/email-check",
      "description": "CommsHarbor: email security audit of a domain (SPF, DKIM, DMARC, MX and a score), paid per call",
      "outputSchema": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "domain": "example.com"
          },
          "discoverable": true
        },
        "output": {
          "type": "json",
          "schema": {
            "type": "object",
            "properties": {
              "mx": {
                "type": "array",
                "items": {
                  "type": "string"
                },
                "description": "MX records as `priority host`."
              },
              "spf": {
                "type": "object",
                "description": "`{record, ending, multiple}`: the first SPF record, its `all` ending and whether there are two."
              },
              "bimi": {
                "type": "boolean",
                "description": "A BIMI record exists at the default selector."
              },
              "dkim": {
                "type": "object",
                "description": "`{found, checked}`: selectors with a published key and the selectors looked up."
              },
              "dmarc": {
                "type": "object",
                "description": "`{record, policy, reports}`: policy reject, quarantine, none or null; reports when `rua` is set."
              },
              "score": {
                "type": "integer",
                "description": "0 to 100: DMARC up to 40, SPF 20, DKIM 20, MX 10, MTA-STS 5 and BIMI 5."
              },
              "domain": {
                "type": "string",
                "description": "Registrable domain that was checked."
              },
              "rating": {
                "type": "string",
                "description": "protected (90+), good (70+), at_risk (40+) or exposed."
              },
              "unread": {
                "type": "array",
                "items": {
                  "type": "string"
                },
                "description": "Parts whose DNS query failed (spf, dmarc, dkim, mx, mta_sts, bimi). They have no findings and no points."
              },
              "mta_sts": {
                "type": "boolean",
                "description": "An MTA-STS policy record exists."
              },
              "cobranca": {
                "type": "object",
                "properties": {
                  "via": {
                    "type": "string",
                    "description": "`x402`, `credito` or the marketplace that already charged the call."
                  },
                  "repetido": {
                    "type": "boolean",
                    "description": "`true` when the credit had already paid this request (the same `Idempotency-Key`): nothing was charged again."
                  },
                  "preco_usd": {
                    "type": "string",
                    "description": "The price of the call in US dollars, such as `0.01`."
                  },
                  "saldo_usd": {
                    "type": "string",
                    "description": "The credit balance after the call, such as `$0.99`; only when paid with `cred_…`."
                  }
                },
                "description": "How this call was paid."
              },
              "findings": {
                "type": "array",
                "items": {
                  "type": "object"
                },
                "description": "`{code, severity}`, most severe first. Codes: dmarc_missing, dmarc_none, spf_plus_all, spf_missing, spf_multiple, dmarc_quarantine, dkim_not_found, spf_neutral, spf_softfail, dmarc_no_reports, mx_missing, mta_sts_missing, bimi_missing."
              },
              "badge_url": {
                "type": "string",
                "description": "SVG badge with the score."
              },
              "share_url": {
                "type": "string",
                "description": "Public page with this result."
              },
              "checked_at": {
                "type": "string",
                "description": "ISO time of the DNS reading."
              },
              "incomplete": {
                "type": "boolean",
                "description": "At least one DNS query failed."
              }
            },
            "description": "The email security audit of one domain, paid per call: the fields of `GET /api/email-check`."
          }
        },
        "inputSchema": {
          "queryParams": {
            "type": "object",
            "required": [
              "domain"
            ],
            "properties": {
              "domain": {
                "type": "string",
                "description": "Public domain to check, such as example.com. A subdomain or URL is reduced to its registrable domain."
              }
            }
          }
        }
      },
      "maxAmountRequired": "10000",
      "maxTimeoutSeconds": 120
    }
  ],
  "billing": {
    "dev": false,
    "how": "Sign a USDC authorization on Base. Retry with PAYMENT-SIGNATURE (x402 v2) or X-PAYMENT (v1), containing the base64 PaymentPayload.",
    "mode": "live",
    "asset": "USDC",
    "eip681": "ethereum:0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913@8453/transfer?address=0x7c22D10a957c62044d03dB5C0086f500Fc645a26&uint256=10000",
    "faucet": null,
    "pay_to": "0x7c22D10a957c62044d03dB5C0086f500Fc645a26",
    "homolog": false,
    "network": "base",
    "wallets": {
      "base_app": "https://base.app/",
      "coinbase": "https://www.coinbase.com/wallet",
      "metamask": "https://metamask.io/download/"
    },
    "chain_id": 8453,
    "dev_gate": false,
    "price_usd": 0.01,
    "alternavel": false,
    "facilitator": "https://api.cdp.coinbase.com/platform/v2/x402",
    "price_atomic": "10000",
    "asset_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
  },
  "credito": {
    "como": "Add balance once and spend it without signing each request.",
    "usar": "Authorization: Bearer cred_… (or the X-Credito header)",
    "vale_em": "all our products",
    "recarregar": "https://commsharbor.com/api/credito",
    "preco_desta_chamada": "$0.01"
  },
  "pacotes": {
    "opcoes": [
      {
        "usd": 1,
        "chamadas": 100
      },
      {
        "usd": 5,
        "chamadas": 500
      },
      {
        "usd": 10,
        "chamadas": 1000
      },
      {
        "usd": 25,
        "chamadas": 2500
      }
    ],
    "recarga": "https://commsharbor.com/api/credito"
  },
  "preco_usd": "0.01",
  "por_chamada": true,
  "x402Version": 1
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.01USDC≈ $0.01 USD
on Base · exact scheme

Pay 0.01 USDC on Base to 0x7c22…45a26. The signed payment is good for 2 minutes.

USD Coin contract
0x8335…02913
Payment window
2 minutes
As published
10000 smallest units
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x7c22D10a957c62044d03dB5C0086f500Fc645a26",
    "amount": "10000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 120
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "domain": "example.com"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "mx": [
            "0 ."
          ],
          "spf": {
            "ending": "-all",
            "record": "v=spf1 -all",
            "multiple": false
          },
          "bimi": false,
          "dkim": {
            "found": [],
            "checked": [
              "google",
              "selector1",
              "selector2",
              "default",
              "k1",
              "k2",
              "mail",
              "dkim",
              "s1",
              "s2",
              "smtp",
              "mx"
            ]
          },
          "dmarc": {
            "policy": "reject",
            "record": "v=DMARC1; adkim=s; aspf=s; p=reject; sp=reject",
            "reports": false
          },
          "score": 65,
          "domain": "example.com",
          "rating": "at_risk",
          "unread": [],
          "mta_sts": false,
          "cobranca": {
            "via": "x402",
            "repetido": false,
            "preco_usd": "0.01"
          },
          "findings": [
            {
              "code": "dkim_not_found",
              "severity": "medium"
            },
            {
              "code": "dmarc_no_reports",
              "severity": "low"
            },
            {
              "code": "mta_sts_missing",
              "severity": "low"
            },
            {
              "code": "bimi_missing",
              "severity": "low"
            }
          ],
          "badge_url": "https://commsharbor.com/api/email-check/badge?domain=example.com",
          "share_url": "https://commsharbor.com/email-security-check?domain=example.com",
          "checked_at": "2026-10-24T11:52:00.161Z",
          "incomplete": false
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "queryParams"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "required": [
                "domain"
              ],
              "properties": {
                "domain": {
                  "type": "string",
                  "description": "Public domain to check, such as example.com. A subdomain or URL is reduced to its registrable domain."
                }
              }
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object",
              "properties": {
                "mx": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "description": "MX records as `priority host`."
                },
                "spf": {
                  "type": "object",
                  "properties": {
                    "ending": {
                      "type": "string"
                    },
                    "record": {
                      "type": "string"
                    },
                    "multiple": {
                      "type": "boolean"
                    }
                  },
                  "description": "`{record, ending, multiple}`: the first SPF record, its `all` ending and whether there are two."
                },
                "bimi": {
                  "type": "boolean",
                  "description": "A BIMI record exists at the default selector."
                },
                "dkim": {
                  "type": "object",
                  "properties": {
                    "found": {
                      "type": "array"
                    },
                    "checked": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    }
                  },
                  "description": "`{found, checked}`: selectors with a published key and the selectors looked up."
                },
                "dmarc": {
                  "type": "object",
                  "properties": {
                    "policy": {
                      "type": "string"
                    },
                    "record": {
                      "type": "string"
                    },
                    "reports": {
                      "type": "boolean"
                    }
                  },
                  "description": "`{record, policy, reports}`: policy reject, quarantine, none or null; reports when `rua` is set."
                },
                "score": {
                  "type": "number",
                  "description": "0 to 100: DMARC up to 40, SPF 20, DKIM 20, MX 10, MTA-STS 5 and BIMI 5."
                },
                "domain": {
                  "type": "string",
                  "description": "Registrable domain that was checked."
                },
                "rating": {
                  "type": "string",
                  "description": "protected (90+), good (70+), at_risk (40+) or exposed."
                },
                "unread": {
                  "type": "array",
                  "description": "Parts whose DNS query failed (spf, dmarc, dkim, mx, mta_sts, bimi). They have no findings and no points."
                },
                "mta_sts": {
                  "type": "boolean",
                  "description": "An MTA-STS policy record exists."
                },
                "cobranca": {
                  "type": "object",
                  "properties": {
                    "via": {
                      "type": "string",
                      "description": "`x402`, `credito` or the marketplace that already charged the call."
                    },
                    "repetido": {
                      "type": "boolean",
                      "description": "`true` when the credit had already paid this request (the same `Idempotency-Key`): nothing was charged again."
                    },
                    "preco_usd": {
                      "type": "string",
                      "description": "The price of the call in US dollars, such as `0.01`."
                    }
                  },
                  "description": "How this call was paid."
                },
                "findings": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "properties": {
                      "code": {
                        "type": "string"
                      },
                      "severity": {
                        "type": "string"
                      }
                    }
                  },
                  "description": "`{code, severity}`, most severe first. Codes: dmarc_missing, dmarc_none, spf_plus_all, spf_missing, spf_multiple, dmarc_quarantine, dkim_not_found, spf_neutral, spf_softfail, dmarc_no_reports, mx_missing, mta_sts_missing, bimi_missing."
                },
                "badge_url": {
                  "type": "string",
                  "description": "SVG badge with the score."
                },
                "share_url": {
                  "type": "string",
                  "description": "Public page with this result."
                },
                "checked_at": {
                  "type": "string",
                  "description": "ISO time of the DNS reading."
                },
                "incomplete": {
                  "type": "boolean",
                  "description": "At least one DNS query failed."
                }
              },
              "description": "The email security audit of one domain, paid per call: the fields of `GET /api/email-check`."
            }
          }
        }
      }
    }
  },
  "payment-identifier": {
    "info": {
      "required": false
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "required"
      ],
      "properties": {
        "id": {
          "type": "string",
          "pattern": "^[A-Za-z0-9_-]+$",
          "maxLength": 128,
          "minLength": 16
        },
        "required": {
          "type": "boolean"
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-10-25 19:57Z
Last indexed by Roundhouse
2026-10-26 20:00Z
Last enriched (probe, favicon, geo)
2026-10-24 01:46Z
x402 version
2
Max timeout
120s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service CommsHarbor and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=CommsHarbor'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://commsharbor.com/api/x402/email-check, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.