# AgentKit x402

> AgentKit x402 is a pay-per-request HTTP API for AI agents: email validation, SPF/DMARC/DKIM audit, DNS records, website contact extraction, SEO audit, URL-to-Markdown, IBAN and Swedish validators (personnummer, orgnr, bankgiro). No API key; pay $0.001-$0.02 per call in USDC on Base using x402 v2. Failed calls are not charged.

## Payment
- Scheme: exact (x402 v2); network: eip155:8453; asset: USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913; pay to: 0x9f950fbeE661D8867750750F600Ff03fb7BAbe8D
- Facilitator: https://facilitator.payai.network
- An unpaid request returns HTTP 402 with a PAYMENT-REQUIRED header (base64 JSON). Retry with a PAYMENT-SIGNATURE header; @x402/fetch does this automatically.
- You are charged only when the response is 2xx. Invalid input, robots.txt blocks and upstream failures return 4xx/5xx and are not settled.

## Endpoints (base URL https://agentkit-x402.erikssonanton2001.workers.dev)

### GET /v1/email-check - $0.002 per call
Email address verification for AI agents and lead-qualification pipelines: syntax check, disposable-domain detection, role-account (info@, support@) detection, free-provider flag, domain typo suggestion (gmial.com -> gmail.com) and DNS MX/A validation via DNS-over-HTTPS. Returns verdict valid, risky, invalid or unknown with a 0-100 score. No SMTP probing, so mailbox existence is not confirmed.
Parameters: email (required) - Email address to check.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/email-check?email=anna%40gmial.com
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/email-check

### GET /v1/email-auth - $0.01 per call
Email deliverability and spoofing-protection audit for a domain: parses SPF (mechanisms, top-level DNS lookup count, +all/~all/-all), DMARC (policy, pct, rua/ruf, alignment), probes common DKIM selectors, and reports MX, BIMI, MTA-STS and TLS-RPT. Returns prioritised findings with fix hints and a 0-100 score. DNS-based; nested SPF includes are not expanded.
Parameters: domain (required) - Domain name without scheme.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/email-auth?domain=example.com
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/email-auth

### GET /v1/domain-dns - $0.005 per call
DNS lookup for a domain through DNS-over-HTTPS: A, AAAA, NS, MX, TXT, CAA, SOA, CNAME records with TTLs, plus DNSSEC presence (DNSKEY, DS) and the resolver validation flag. Structured JSON for domain research, due diligence and infrastructure agents.
Parameters: domain (required) - Domain name without scheme.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/domain-dns?domain=example.com
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/domain-dns

### GET /v1/site-contacts - $0.02 per call
Public contact details published on a website: emails (including mailto links and [at] obfuscation, classified role or personal), phone numbers normalised to E.164, social profile links, address hints and Swedish organisation numbers for .se sites. Fetches the given page plus up to 3 contact-like pages (/contact, /kontakt, /about, /om-oss, /impressum) on the same host only. Honours robots.txt; returns 403 blocked_by_robots (not charged) if disallowed.
Parameters: url (required) - Page URL, usually the homepage.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/site-contacts?url=https%3A%2F%2Fexample.com%2F
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/site-contacts

### GET /v1/site-audit - $0.02 per call
Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours robots.txt.
Parameters: url (required) - Page URL to audit.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/site-audit?url=https%3A%2F%2Fexample.com%2F
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/site-audit

### GET /v1/url-markdown - $0.005 per call
Fetches a web page (up to 1.5 MB, 8 s timeout) and returns clean Markdown: title, headings, paragraphs, lists, links, images, code blocks and simple tables, with navigation and footers removed. Ready to feed to LLMs. Static HTML only, no JavaScript rendering. Honours robots.txt.
Parameters: url (required) - Page URL to convert.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/url-markdown?url=https%3A%2F%2Fexample.com%2F
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/url-markdown

### GET /v1/se/validate - $0.001 per call
Validates Swedish identifiers with checksum and date logic: personnummer, samordningsnummer, organisationsnummer (including sole-trader and VAT forms), bankgiro, plusgiro and OCR payment references. Returns normalised forms and error codes. No application-level storage.
Parameters: type (required) [personnummer|samordningsnummer|orgnr|bankgiro|plusgiro|ocr] - Identifier type.; value (required) - The identifier to validate.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/se/validate?type=orgnr&value=556016-0680
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/se-validate

### GET /v1/iban - $0.001 per call
IBAN validation: country-specific length (from a bundled table of IBAN countries), mod-97 checksum, normalised and formatted output, BBAN and check digits. Does not check that the account exists.
Parameters: iban (required) - IBAN, spaces allowed.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/iban?iban=GB82+WEST+1234+5698+7654+32
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/iban

### GET /v1/se/account-to-iban - $0.002 per call
Converts a Swedish clearing number and account number to IBAN and BIC, identifies the bank, and validates the account number checksum according to the bank-specific rules. Clearing table dated 2026-10-16; does not check that the account exists.
Parameters: clearing (required) - Clearing number, 4 digits (5 for Swedbank 8xxx).; account (required) - Account number.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/se/account-to-iban?clearing=5000&account=1234501
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/se-account-to-iban

### GET /v1/bank-days - $0.001 per call
Adds or subtracts Swedish bank days (weekends, public holidays and midsommarafton, julafton, nyarsafton excluded) to a date. Optional mode=work counts only weekends and red days. Returns the result date with weekday, ISO week and holiday names for both dates.
Parameters: from (required) - Start date, YYYY-MM-DD.; add (required) - Bank days to add (negative to go back, max 1000).; mode (optional) [bank|work] - bank (default) or work.
Example: https://agentkit-x402.erikssonanton2001.workers.dev/v1/bank-days?from=2026-12-23&add=2
Free sample output: https://agentkit-x402.erikssonanton2001.workers.dev/v1/demo/bank-days

## Limits and honesty notes
- Each paid call makes at most 6 outbound HTTP requests (robots.txt, redirects and extra pages included), with an 8 second timeout and a 1.5 MB cap per page. Larger pages are truncated and flagged.
- Only http/https on ports 80 and 443 and public DNS names are fetched. IP addresses, localhost, internal names and URLs with credentials are rejected.
- robots.txt is honoured for the user agent AgentKitBot and for "*". Disallowed pages return 403 blocked_by_robots.
- No JavaScript is executed. Single-page applications that render in the browser return little or no content.
- Email checks use syntax rules, lists and DNS only. No SMTP connection is made, so a deliverable mailbox is not confirmed.
- DNS data comes from one resolver (cloudflare-dns.com over HTTPS) and can differ from what other resolvers return.
- Swedish validators check formats and checksums. They do not prove that a person, company or account exists.
- Requests that fail (HTTP 4xx or 5xx) are not settled; you are charged only when the response is successful (HTTP 2xx).
- No guaranteed uptime or accuracy. The service runs on a free Cloudflare Workers plan and may rate-limit or fail under load.

## Privacy
Contact extraction returns only information that a site publishes on its own pages. The caller is responsible for lawful use, in particular for email addresses and phone numbers of private individuals and sole traders (GDPR and similar laws). The service has no application-level storage and does not use a database or key-value store.

## Other
- OpenAPI: https://agentkit-x402.erikssonanton2001.workers.dev/openapi.json
- MCP: https://agentkit-x402.erikssonanton2001.workers.dev/mcp
- Crawler info: https://agentkit-x402.erikssonanton2001.workers.dev/bot
- Contact: zenith-ops@mail.grokbot.com