OrionCMD Checks
api.orioncmd.com · 12 paid endpoints · listed 2026-10-27
When does a domain expire? Registration expiry and registrar via RDAP. $0.01 USDC on Base per call. Returns registrar, registration and expiry dates, days left, EPP status and nameservers. Within 60 days of expiry, fixes[] gives auto-renew steps for the registrar. Don't use this for SSL certificate expiry; use /v1/cert.
Paid endpoints
| Method | Endpoint | Price | Networks |
|---|---|---|---|
| GET | api.orioncmd.com/v1/cert Check a domain's SSL/TLS certificate expiry and renewal from CT logs. $0.01 USDC on Base per call. Returns issuer, validity, days left, % of lifetime used, rene | $0.01 | Base |
| GET | api.orioncmd.com/v1/dns Check a domain's DNS records, DNSSEC, CAA, SPF and DMARC. $0.01 USDC on Base per call. Returns NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA and DNSSEC via Cloudflare D | $0.01 | Base |
| GET | api.orioncmd.com/v1/email-auth Check a domain's email authentication: SPF, DMARC, DKIM, MTA-STS, TLS-RPT and BIMI. $0.01 USDC on Base per call. Returns SPF validity and lookup count (limit 10 | $0.01 | Base |
| GET | api.orioncmd.com/v1/expiry When does a domain expire? Registration expiry and registrar via RDAP. $0.01 USDC on Base per call. Returns registrar, registration and expiry dates, days left, | $0.01 | Base |
| GET | api.orioncmd.com/v1/headers Check a website's HTTP security headers and redirect chain. $0.01 USDC on Base per call. One HTTPS GET returns the redirect chain, final status, HSTS, CSP, X-Fr | $0.01 | Base |
| GET | api.orioncmd.com/v1/threat-check Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 agains | $0.02 | Base |
| GET | api.orioncmd.com/v1/domain-grade Get a domain security grade A-F with a per-category breakdown. $0.03 USDC on Base per call. Returns one A-F grade, a 0-100 score, points per category (TLS 25, e | $0.03 | Base |
| GET | api.orioncmd.com/v1/site-health Check a domain's certificate, DNS and expiry together in one call. $0.03 USDC on Base per call. Returns a summary, the renewal-stall heuristic, the Let's Encryp | $0.03 | Base |
| GET | api.orioncmd.com/v1/expiry/batch OrionCMD Checks: Certificate and domain-registration expiry for up to 5 domains in one call. Certificate and domain-registration expiry for up to 5 domains in o | $0.04 | Base |
| POST | api.orioncmd.com/v1/watch OrionCMD Checks: Prepaid domain threat watch: up to 25 domains for 30 days, webhook alerts. Pay once; each domain is re-checked about once a day for 30 days. Yo | $0.30 | Base |
| GET | api.orioncmd.com/v1/bulk-threat-check Check up to 100 domains or IPv4 addresses against a threat IOC feed in one call. $0.5 USDC on Base per call. Resolves each domain and matches names, parent doma | $0.50 | Base |
| GET | api.orioncmd.com/v1/audit-report Run a full website security audit with a prioritized fix list for a client or vendor review. $2 USDC on Base per call. Runs every OrionCMD check plus HTTPS redi | $2.00 | Base |
Latest checks
| When | Endpoint | HTTP | ms | Result |
|---|---|---|---|---|
| 5 days ago | api.orioncmd.com/v1/audit-report | 402 | 1402 | valid x402 v2 terms |
Income on Base (7 days)
This provider's payout address is shared by several providers, so its income is not shown as its own.
Is this your API?
<a href="https://logicnodes.io/observatory/p/api.orioncmd.com"><img src="https://logicnodes.io/observatory/badge/api.orioncmd.com.svg" alt="x402 status"></a>
Claim it for free with
x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/api.orioncmd.com