{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_wjzff2k4a8c8","handle":"orioncmd-checks","url":"https://wellknown.network/agents/orioncmd-checks","links":{"self":"https://wellknown.network/agents/orioncmd-checks/record.json","html":"https://wellknown.network/agents/orioncmd-checks","markdown":"https://wellknown.network/agents/orioncmd-checks/record.md","api":"https://wellknown.network/api/v1/agents/orioncmd-checks","status":"https://wellknown.network/api/v1/agents/orioncmd-checks/status","claim":"https://wellknown.network/agents/orioncmd-checks/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/orioncmd-checks/claim.json","badge":"https://wellknown.network/agents/orioncmd-checks/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/orioncmd-checks/history","tools":"https://wellknown.network/api/v1/agents/orioncmd-checks/tools"},"ard":{"identifier":"urn:air:api.orioncmd.com:server:orioncmd-checks","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"OrionCMD Checks","summary":"Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).","description":"Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).","publisher":{"name":"com.orioncmd.api","url":null},"homepage":"https://api.orioncmd.com/llms.txt","repository":null,"version":"1.5.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://api.orioncmd.com/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-17T16:38:10.221346Z","publishedAt":"2026-10-17T16:38:10.221346Z","registryName":"com.orioncmd.api/checks"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"derived"},{"slug":"productivity.email","name":"Email","confidence":0.859,"provenance":"derived"},{"slug":"content.writing","name":"Writing & Editing","confidence":0.51,"provenance":"derived"},{"slug":"commerce.payments","name":"Payments","confidence":0.51,"provenance":"derived"},{"slug":"commerce.pricing","name":"Pricing & Quotes","confidence":0.51,"provenance":"derived"},{"slug":"communication.notifications","name":"Notifications","confidence":0.51,"provenance":"derived"}],"categories":["commerce","communication","content","productivity","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 41m ago.","lastOkAt":"2026-10-24T13:29:48.898Z","lastProbedAt":"2026-10-24T13:29:48.898Z","statusComputedAt":"2026-10-24T13:32:30.231Z","reliability30d":{"probes":44,"successRate":1,"p50Ms":65,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":44,"ok":44,"authBoundaryOk":0,"serviceOk":44,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-24T13:29:48.898Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":91,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-24T06:27:28.066Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":69,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T23:26:14.650Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":53,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T16:29:03.061Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":74,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T09:27:56.882Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":119,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T02:23:32.066Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":38,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T19:30:40.070Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":60,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T12:31:09.548Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":130,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T06:26:14.844Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":43,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-21T23:27:47.317Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":61,"error":null,"detail":{"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"toolCount":13,"toolsHash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","serverName":"orioncmd-checks","capabilities":["tools"],"serverVersion":"1.6.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"validate_target","description":"Free. Check that a domain or URL is well-formed and get the normalized hostname, before calling a paid check. Offline: no network request, no payment. Rejects I"},{"name":"pricing","description":"Free. Return the price of every paid tool, the payment network (Base) and the receiving address, so you can budget before calling. No input, no network request,"},{"name":"check_cert","description":"Check the TLS certificate of one hostname: issuer, validity dates, days left, % of lifetime used, renewal cadence and a renewal-stall flag, plus a live HTTPS pa"},{"name":"check_dns","description":"Look up the live DNS of a domain: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (climbing to the parent zone) and DNSSEC status, with plain-English findings. Use it for"},{"name":"check_domain_expiry","description":"Check when a domain registration expires: registrar, registered and expiry dates, days left, EPP status codes and nameservers, from the registry's RDAP server. "},{"name":"site_health","description":"Run check_cert, check_dns and check_domain_expiry together and return their raw results plus a short summary, the renewal-stall flag and the Let's Encrypt 64-da"},{"name":"check_email_auth","description":"Review the email authentication setup of a domain: SPF validity and DNS-lookup count (limit 10), DMARC policy, pct and reporting, DKIM on common selector names,"},{"name":"check_security_headers","description":"Check the HTTP security headers of a website with one live HTTPS GET: redirect chain (up to 5 hops), final status, HSTS, CSP, X-Frame-Options, X-Content-Type-Op"},{"name":"domain_grade","description":"Grade a domain's security posture A-F in one call, for vendor-risk or due-diligence checks. Runs the TLS, DNS (DNSSEC, CAA), registration-expiry, email-auth and"},{"name":"full_site_audit","description":"Full site audit report for one domain, for client reports, vendor reviews or a pre-launch check. Runs every check (TLS from CT logs + live probe, DNS/DNSSEC/CAA"},{"name":"threat_check","description":"Is this domain known-bad? Resolves the hostname (A/AAAA), matches the name, its parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day "},{"name":"bulk_threat_check","description":"Check up to 100 domains or IPv4 addresses at once against ThreatCluster's high-confidence 30-day IOC feed; each domain is resolved and its IPv4 matched too. IOC"},{"name":"watch_status","description":"Free. Status of a paid domain watch (created with HTTP POST /v1/watch): items, expiry, last check, current DNS/IOC/claim state, last webhook delivery."}],"package":null,"toolSurface":{"id":"ts_jmftpktv4q9g","endpointId":"ep_4mxv9skfkngf","hash":"c6b013a5e72e400a207893824a9d20cc177920c025c1a2ff7657863e8438fe4a","toolCount":13,"serverName":"orioncmd-checks","serverVersion":"1.6.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-17T08:25:23.073Z","lastSeenAt":"2026-10-24T13:29:48.908Z","observations":26,"toolNames":["validate_target","pricing","check_cert","check_dns","check_domain_expiry","site_health","check_email_auth","check_security_headers","domain_grade","full_site_audit","threat_check","bulk_threat_check","watch_status"],"distinctSurfaces":5},"endpointFacts":[{"id":"ep_4mxv9skfkngf","url":"https://api.orioncmd.com/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-23T09:27:56.894Z","auth":{"observedAt":"2026-10-23T09:27:56.913Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-23T09:27:56.927Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"orioncmd.com","issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validFrom":"2026-10-10T05:19:49.000Z","validTo":"2027-01-08T06:19:46.000Z","daysToExpiry":75,"sanCount":3,"fingerprint256":"C1:26:BA:89:97:A0:DE:0C:69:98:CA:A2:FC:B0:EF:4B:2C:F9:70:C3:AC:53:CA:71:A4:78:87:E2:7B:23:E7:AA"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"com.orioncmd.api/checks","url":"https://registry.modelcontextprotocol.io/v0/servers/com.orioncmd.api%2Fchecks","firstSeenAt":"2026-10-12T06:21:32.461Z","fetchedAt":"2026-10-22T00:23:15.884Z","normalizedAt":"2026-10-22T00:23:15.884Z"}]},"firstSeenAt":"2026-10-12T06:21:32.461Z","updatedAt":"2026-10-24T13:34:12.288Z"}