Pricing

$10.00 / 1,000 domain checkeds

Well-Known URI Prober - Scan /.well-known/ Endpoints API

Probe a domain's /.well-known/ endpoints. Input: domain. Output: JSON per endpoint (security.txt, change-password, mta-sts, openid-configuration, apple-app-site-association, assetlinks, dnt-policy) with URL, status, and found flag. $0.01 per domain checked.

Pricing

$10.00 / 1,000 domain checkeds

Rating

0.0

(0)

Developer

Anthony Snider

Actor stats

Bookmarked

Total users

Monthly active users

11 days ago

Last modified

Well-Known URI Prober

Probe any domain's standard /.well-known/ endpoints in one shot — discover which the site actually serves, with status, content-type and size, plus parsed security.txt and OpenID configuration.

Live on the Apify Store — run it instantly or call it as an agent tool via Apify MCP.

What you get

17 curated /.well-known/ endpoints probed per domain — security.txt, change-password, mta-sts.txt, openid-configuration, oauth-authorization-server, apple-app-site-association, assetlinks.json, dnt-policy.txt, gpc.json, host-meta, webfinger, nodeinfo, Matrix server/client, ai.txt, CardDAV/CalDAV.
found vs missing — exactly which endpoints exist (2xx), each with status, contentType, size and finalUrl.
Parsed security.txt (RFC 9116) — contact, expires, encryption, policy, canonical, preferred languages, and whether it is PGP-signed.
Parsed openid-configuration — issuer, authorization/token/userinfo endpoints, JWKS URI, supported scopes and grant types.
Single or bulk — pass one domain or many domains, capped by maxDomains.

Input

{
  "domain": "github.com",
  "domains": ["google.com"],
  "maxDomains": 25
}

Output

{
  "domain": "github.com",
  "checkedAt": "2026-06-24T00:00:00.000Z",
  "foundCount": 3,
  "found": [
    { "path": "/.well-known/security.txt", "status": 200, "contentType": "text/plain; charset=utf-8", "size": 540, "finalUrl": "https://github.com/.well-known/security.txt" },
    { "path": "/.well-known/change-password", "status": 200, "contentType": "text/html; charset=utf-8", "size": 12345, "finalUrl": "https://github.com/.well-known/change-password" }
  ],
  "missing": ["/.well-known/mta-sts.txt", "/.well-known/openid-configuration"],
  "securityTxt": {
    "contact": ["https://hackerone.com/github"],
    "expires": "2026-12-31T00:00:00.000Z",
    "encryption": [],
    "canonical": ["https://github.com/.well-known/security.txt"],
    "policy": ["https://github.com/security"],
    "preferredLanguages": "en",
    "signed": false
  },
  "openidConfiguration": null
}

Security.txt + Well-Known Inspector

wiggly_book/well-known-inspector

Bulk domain inspector for security.txt and useful .well-known trust/security endpoints: change-password, OpenID config, assetlinks, Apple app-site association, MTA-STS, host-meta, and more.

Mack

Well-Known File Inventory

junipr/well-known-file-inventory

Inventory common `.well-known` files across domains and report reachability/content hints.

junipr

Security.txt Finder & Parser - RFC 9116 Checker API

eliai/security-txt-finder

Find and parse security.txt (RFC 9116). Input: domain. Output: JSON with found flag, location URL, Contact, Encryption, Policy, Expires, and validity checks. For security researchers and agents reporting vulnerabilities. Pay-per-result at $0.01 per domain checked.

Anthony Snider

MX Record Checker - Verify a Domain Can Receive Email

eliai/mx-record-checker

Check a domain's mail servers via DNS. Input: domains (list). Output: JSON per domain with MX records and priorities, canReceiveEmail flag, and resolved A records for each mail host. Cheap pay-per-result: $0.01 per domain checked.

Anthony Snider

Ads.txt & App-ads.txt Parser - Authorized Sellers API

eliai/ads-txt-parser

Parse a publisher's ads.txt and app-ads.txt. Input: domain. Output: JSON records per authorized seller - ad system domain, publisher ID, relationship (DIRECT/RESELLER), certification authority ID. Clean structured data at $0.01 per domain checked.

Anthony Snider

DNS Records Lookup - All Record Types for Any Domain

eliai/dns-records-lookup

Look up every DNS record type for a domain in one call. Input: domains (list). Output: JSON per domain with A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, SRV, PTR records and values. Cheap pay-per-result: $0.02 per domain checked.

Anthony Snider

MTA-STS Policy Checker

junipr/mta-sts-policy-checker

Audit mta-sts policy checker inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Domain Expiry Monitor — WHOIS Expiry Dates & Alert Flags

eliai/domain-expiry-monitor

Input: a list of domains. Output: one JSON record per domain with the WHOIS expiry date, days remaining, and an expiring-soon alert flag for domains close to lapsing. Schedule it and never lose a domain. Cheap pay-per-result: $0.02 per domain checked.

Anthony Snider

Domain Age Checker — Registration Date & Exact Age (WHOIS)

eliai/domain-age-checker

Input: a list of domains. Output: one JSON record per domain with the WHOIS registration date and exact domain age in years and days. A trust and SEO signal agents and marketers use to vet sites. Cheap pay-per-result pricing: $0.02 per domain checked.

Anthony Snider

DMARC Record Checker - Fetch, Parse & Grade DMARC Policy

eliai/dmarc-record-checker

Fetch and grade a domain's DMARC policy. Input: domains (list). Output: JSON per domain with raw record, parsed p/sp/pct/rua/ruf tags, monitoring-only vs enforced status, and weak-config flags. Cheap pay-per-result: $0.02 per domain checked.

Anthony Snider