# DomainDNA API by CyberMax

> Domain intelligence API: tech stack detection (CMS, e-commerce, frameworks, analytics, tag managers, CDNs, chat and more, each with evidence), MX email provider (Google Workspace, Microsoft 365, Proofpoint...), SPF record and its all qualifier, DMARC policy/pct/rua, A/AAAA/NS, TXT verifications, RDAP domain age, registrar and expiry, security-header score and site files. REST + MCP server.

> Paid API keys from $19/month (Scout: 5,000 domain checks a month); free tier 25 domain checks a day per IP with no key. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/scout?s=lead · all plans: https://domaindna-api.cybermax-tools.workers.dev/docs#pricing

One call per domain: the site's tech stack with the evidence for each technology (103+ fingerprints), its email provider, SPF and DMARC policy, domain age and registrar, security headers and robots/sitemap/llms.txt. For sales and marketing teams, security reviews, agencies and AI agents. 25 free domains a day, no key; plans from $5 (one-time pack) or $19/month.

## API (free tier without a key; paid API keys for more)
- [/api/report](https://domaindna-api.cybermax-tools.workers.dev/api/report?domain=stripe.com): Everything about one domain: tech stack, email security, DNS, registration, site files
- [/api/email-security](https://domaindna-api.cybermax-tools.workers.dev/api/email-security?domain=stripe.com,notion.so): Email provider, SPF and DMARC for up to 5 domains
- [/api/tech](https://domaindna-api.cybermax-tools.workers.dev/api/tech?domain=stripe.com): Tech stack of up to 3 websites, with evidence
- [/api/registration](https://domaindna-api.cybermax-tools.workers.dev/api/registration?domain=stripe.com,notion.so): Domain age, registrar and expiry for up to 10 domains (RDAP)
- GET for simple calls, POST a JSON body for lists. Same field names as the bulk version's dataset records.
- OpenAPI 3.1: https://domaindna-api.cybermax-tools.workers.dev/openapi.json

## MCP (remote, streamable HTTP, no auth)
- Endpoint: https://domaindna-api.cybermax-tools.workers.dev/mcp
- `domain_report`: Tech stack (with evidence), email provider, SPF, DMARC, DNS, RDAP registration (age, registrar, expiry), security headers and site files for one domain, URL or email.
- `email_security`: MX provider, SPF record and all qualifier, DMARC policy, pct and rua, A/AAAA/NS and TXT verifications for 1-5 domains.
- `tech_stack`: Technologies (CMS, e-commerce, frameworks, analytics, tag managers, CDN, chat...) with the evidence for each, plus security headers, for 1-3 websites.
- `domain_registration`: RDAP registration (registrar, created, updated, expires, age in days, status) for 1-10 domains.

## Limits
- Domains per call: /api/report 1, /api/email-security 5, /api/tech 3, /api/registration 10; 10 calls a minute per IP on the free tier.
- Free tier: 25 domains a day per IP, no key. Paid keys from $5 (one-time pack) or $19/month (see Get an API key).
- Each domain in a call counts as one check (duplicates in the same call count once). Failed calls are not counted. Answers are cached for 1 hour per domain and check (cached: true).
- Tech detection reads the homepage the way a browser would (first 300 KB); sites behind a bot wall come back with blocked: true and a partial list. No TLS certificate check (Workers cannot read certificates; the Apify tool has it).
- Registration dates come from the registry's own RDAP server; a few country TLDs publish none, and some registries (.org) rate-limit busy periods (registration: null with the reason in errors; retry later, and successful answers are cached).

## More
- Health: https://domaindna-api.cybermax-tools.workers.dev/health
- All CyberMax tools: https://cybermax-tools-cybermax.static.hf.space/
- Loop over longer lists (report: 1 domain per call; email-security: 5; tech: 3; registration: 10). For 10,000-domain lists, CSV export, TLS certificate checks and a monitor mode that returns only changed domains, the DomainDNA tool on the Apify Store does the same checks in bulk.

## Pricing
- Free: 25 domain checks a day per IP, 10/min, no key.
- Scout: $19/month, 5,000 domain checks a month, 30/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/scout?s=llms
- Analyst: $49/month, 15,000 domain checks a month, 60/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/analyst?s=llms
- Platform: $99/month, 40,000 domain checks a month, 120/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/platform?s=llms
- Pay as you go: $5, 1,000 domain checks (one-time pack, no expiry), 30/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/payg?s=llms
- Scout yearly: $190/year, 5,000 domain checks a month, 30/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/scout-yearly?s=llms
- Analyst yearly: $490/year, 15,000 domain checks a month, 60/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/analyst-yearly?s=llms
- Platform yearly: $990/year, 40,000 domain checks a month, 120/min. Buy: https://domaindna-api.cybermax-tools.workers.dev/buy/platform-yearly?s=llms
- Use the key as `x-api-key: KEY` or `Authorization: Bearer KEY` (MCP too). Usage: https://domaindna-api.cybermax-tools.workers.dev/key. Machine-readable: https://domaindna-api.cybermax-tools.workers.dev/pricing.json