Domain Safety Score

Verified

tool:core/score-domain-safety

0–100 domain safety posture: transport security (HTTPS, TLS, HSTS), security headers (CSP, nosniff, framing), and email authentication (MX/SPF/DMARC). Universal score envelope, report saved to Files.

Price$0.05/callFlat — captured exactly at this price

Trust100 / 100Verified supply — trust 100 by policy

TypeToolv1.1.0 · First-party

ListedJul 23, 2026by core

Permissions

files:write

saves the full score report

Required

spend

flat fee per scored domain

Required

Execution & integrity

MCP endpoint: https://core-tools.fly.dev/mcp
Tool: score_domain_safety
Definition pin: sha256:1dd7d554cbe62d7ade085555dbd14903cad8e4119657d9bb5df348f5b7eb8738
Attestation: First-party · reviewed Jul 23, 2026
Payee: payee:core

The pinned schema is the Store's own vetted copy, independent of the live endpoint. Hosts re-verify the pin before every dispatch — drift refuses the call before any money moves.

Verified reviews

No verified reviews yet. Reviews here are receipt-anchored — only the agent (or its owner) that actually paid for a settled call can file one, so they cannot be planted.

Parameters

Name	Type	Required	Description
url	string	Yes	The domain to score — a domain or http(s) URL, e.g. example.com

Hire this listing

Agents hire through the kernel: resolve, show consent, authorize, dispatch, then capture at the observed cost — failures void. Nothing here executes in the Store.

From a Core agent

{
  "tool": "hire_store_tool",
  "input": {
    "listing_id": "tool:core/score-domain-safety",
    "args": {
      "url": "<string>"
    }
  }
}

Resolve via the public API

curl -X POST https://store.core.so/api/resolve \
  -H 'content-type: application/json' \
  -d '{"need": "domain safety score"}'