{"openapi":"3.1.0","info":{"title":"OrionCMD Checks","version":"1.2.0","description":"Pay-per-call website checks for agents: TLS certificate (from CT logs), DNS/email-auth, domain expiry, and a site-health bundle. Also available as an MCP server at /mcp.","contact":{"url":"https://orioncmd-checks-mcp.dario-9fa.workers.dev/llms.txt"},"x-guidance":"Pay-per-call website checks for agents: TLS certificate (from CT logs), DNS/email-auth, domain expiry, and a site-health bundle. Also available as an MCP server at /mcp. Call a paid route without payment to get an x402 v2 challenge (402 + PAYMENT-REQUIRED header), pay in USDC, retry with PAYMENT-SIGNATURE. Invalid input -> 400, never charged. More: https://orioncmd-checks-mcp.dario-9fa.workers.dev/llms.txt"},"servers":[{"url":"https://orioncmd-checks-mcp.dario-9fa.workers.dev"}],"x-discovery":{"wellKnown":"https://orioncmd-checks-mcp.dario-9fa.workers.dev/.well-known/x402","llms":"https://orioncmd-checks-mcp.dario-9fa.workers.dev/llms.txt"},"paths":{"/v1/cert":{"get":{"operationId":"v1_cert","summary":"Certificate status from CT logs + live HTTPS probe","description":"Issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs (NOT the live served cert), plus a live HTTPS pass/fail probe from Cloudflare's edge.","x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.01"},"protocols":[{"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x2dAF658B01e257206375798a15832E9f547D65dD"}}]},"responses":{"200":{"description":"Success (payment settled)","content":{"application/json":{}}},"400":{"description":"Invalid input. Never charged."},"402":{"description":"Payment required. x402 v2 challenge in the PAYMENT-REQUIRED header."},"502":{"description":"Upstream data source failed. Payment NOT settled."}},"parameters":[{"name":"domain","in":"query","required":true,"schema":{"type":"string","description":"Hostname or URL, e.g. example.com"},"example":"example.com"}]}},"/v1/dns":{"get":{"operationId":"v1_dns","summary":"Live DNS / email-auth / CAA / DNSSEC check","description":"NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (tree-climbing) and DNSSEC via Cloudflare DoH, with plain-English findings.","x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.01"},"protocols":[{"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x2dAF658B01e257206375798a15832E9f547D65dD"}}]},"responses":{"200":{"description":"Success (payment settled)","content":{"application/json":{}}},"400":{"description":"Invalid input. Never charged."},"402":{"description":"Payment required. x402 v2 challenge in the PAYMENT-REQUIRED header."},"502":{"description":"Upstream data source failed. Payment NOT settled."}},"parameters":[{"name":"domain","in":"query","required":true,"schema":{"type":"string","description":"Hostname or URL, e.g. example.com"},"example":"example.com"}]}},"/v1/expiry":{"get":{"operationId":"v1_expiry","summary":"Domain registration expiry via RDAP","description":"Registrar, registration and expiry dates, days left, EPP status and nameservers from the registry's RDAP server.","x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.01"},"protocols":[{"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x2dAF658B01e257206375798a15832E9f547D65dD"}}]},"responses":{"200":{"description":"Success (payment settled)","content":{"application/json":{}}},"400":{"description":"Invalid input. Never charged."},"402":{"description":"Payment required. x402 v2 challenge in the PAYMENT-REQUIRED header."},"502":{"description":"Upstream data source failed. Payment NOT settled."}},"parameters":[{"name":"domain","in":"query","required":true,"schema":{"type":"string","description":"Hostname or URL, e.g. example.com"},"example":"example.com"}]}},"/v1/site-health":{"get":{"operationId":"v1_site_health","summary":"Bundle: cert + DNS + expiry + renewal-stall + LE 64-day note","description":"Runs the cert, DNS and expiry checks together and returns a summary, the renewal-stall heuristic and the Let's Encrypt 64-day (2027-02-10) note. Partial results if one source fails.","x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.03"},"protocols":[{"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x2dAF658B01e257206375798a15832E9f547D65dD"}}]},"responses":{"200":{"description":"Success (payment settled)","content":{"application/json":{}}},"400":{"description":"Invalid input. Never charged."},"402":{"description":"Payment required. x402 v2 challenge in the PAYMENT-REQUIRED header."},"502":{"description":"Upstream data source failed. Payment NOT settled."}},"parameters":[{"name":"domain","in":"query","required":true,"schema":{"type":"string","description":"Hostname or URL, e.g. example.com"},"example":"example.com"}]}}}}