OrionCMD Checks

Name: OrionCMD Checks
Author: com.orioncmd.api

MCP serverMCP

Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).

by com.orioncmd.apihomepage ↗v1.5.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"orioncmd-checks","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability41/41 checks ok

when	check	result	http	latency	detail
1 h ago	mcp initialize	ok	200	74 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
8 h ago	mcp initialize	ok	200	119 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
15 h ago	mcp initialize	ok	200	38 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
22 h ago	mcp initialize	ok	200	60 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
29 h ago	mcp initialize	ok	200	130 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
35 h ago	mcp initialize	ok	200	43 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
2 d ago	mcp initialize	ok	200	61 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
2 d ago	mcp initialize	ok	200	112 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
3 d ago	mcp initialize	ok	200	25 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools
3 d ago	mcp initialize	ok	200	75 ms	server orioncmd-checks 1.6.0 · protocol 2025-06-18 · 13 tools

Tools observed via MCP handshake

validate_target — Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I
pricing — Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,
check_cert — Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa
check_dns — Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for
check_domain_expiry — Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server.
site_health — Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da
check_email_auth — Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,
check_security_headers — Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op
domain_grade — Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and
full_site_audit — Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA
threat_check — Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day
bulk_threat_check — Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC
watch_status — Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery.

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registrycom.orioncmd.api/checks

first seen 11 d ago · fetched 2 d agoopen ↗

Field history (12 recent events)

5 d ago · declared · summary → "Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402)."
5 d ago · declared · version → "1.5.0"
5 d ago · declared · description → "Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402)."
8 d ago · declared · summary → "Pay-per-call TLS, DNS/email-auth and expiry checks, plus a $2 full site audit (x402 USDC)."
8 d ago · declared · description → "Pay-per-call TLS, DNS/email-auth and expiry checks, plus a $2 full site audit (x402 USDC)."
8 d ago · declared · version → "1.4.0"
11 d ago · declared · summary → "Pay-per-call TLS certificate, DNS/email-auth and domain-expiry checks for any domain (x402 USDC)."
11 d ago · declared · publisherName → "com.orioncmd.api"
11 d ago · declared · description → "Pay-per-call TLS certificate, DNS/email-auth and domain-expiry checks for any domain (x402 USDC)."
11 d ago · declared · homepageUrl → "https://api.orioncmd.com/llms.txt"
11 d ago · declared · version → "1.0.0"
11 d ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from