# orbit Web Tools

> Web utilities for agents, computed live at call time: URL health/redirect/x402 check, web page to Markdown (robots.txt honoured), DNS lookup with SPF/DMARC, email address validation (MX, disposable, role, typo), HTTP security-header audit and AI-agent readiness audit (llms.txt, AI crawler rules, x402, MCP, OpenAPI). $0.001 per call. Pay per call with x402 (USDC on Base, no account, no API key). Free MCP (trimmed sample output) at https://orbit-web.orbit-builder.workers.dev/mcp. By orbit-builder.

## Paid endpoints (x402 v2, exact, eip155:8453, USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, payTo 0x9Da4B249B8afa7818de5BFf7eEd8b13e6feeb9b3). Bad input is rejected with 400 before payment; upstream errors return >=400 and are never settled. A call with no parameters runs the example input shown.

- URL health check ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/url-check — Is a URL up? Live GET from Cloudflare's edge: final HTTP status, every redirect hop with status and latency, total ms, content-type/length, server, TLS, and if it answers 402 the decoded x402 payment terms (version, network, amount, payTo, bazaar). Unreachable host is still a delivered verdict (up:false).
  params: url* (public http(s) URL)
  example: https://orbit-web.orbit-builder.workers.dev/v1/url-check?url=https%3A%2F%2Fexample.com
- Web page to Markdown ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/read — Fetch a public web page and return LLM-ready Markdown: title, meta description, canonical, language, main content (scripts/nav/footer stripped, headings/lists/links kept), first 50 absolute links, word count. Honours robots.txt (disallowed → 403, not charged). No JS rendering; non-HTML → 415. max_chars 500-50000 (default 20000).
  params: url* (public http(s) URL); max_chars (truncate markdown (500-50000, default 20000))
  example: https://orbit-web.orbit-builder.workers.dev/v1/read?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FHTTP_402&max_chars=3000
- DNS lookup ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/dns — Live DNS records for a domain via DNS-over-HTTPS (1.1.1.1): A, AAAA, CNAME, MX, NS, TXT, CAA, SOA, or type=ALL for all of them plus parsed SPF and DMARC policy. Returns rcode (NOERROR/NXDOMAIN), records with TTL, DNSSEC AD flag.
  params: domain* (domain name, e.g. example.com); type (A, AAAA, CNAME, MX, NS, TXT, CAA, SOA or ALL (default ALL))
  example: https://orbit-web.orbit-builder.workers.dev/v1/dns?domain=example.com&type=ALL
- Email address check ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/email — Validate an email address without sending mail: RFC syntax, domain MX (falls back to A), null-MX, disposable-domain list, role account (info@, support@…), free provider, typo suggestion (gmial.com → gmail.com), SPF/DMARC presence, and a verdict valid/risky/invalid with reasons. Does not probe the mailbox.
  params: email* (email address)
  example: https://orbit-web.orbit-builder.workers.dev/v1/email?email=info%40github.com
- HTTP security headers audit ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/headers — Audit a site's HTTP security headers live: HSTS (max-age, preload), CSP (unsafe-inline/eval flags), X-Frame-Options/frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP, cookie Secure/HttpOnly/SameSite flags, server/version leaks, HTTPS redirect. Score 0-100, grade A+-F, list of fixes.
  params: url* (public http(s) URL)
  example: https://orbit-web.orbit-builder.workers.dev/v1/headers?url=https%3A%2F%2Fgithub.com
- AI-agent readiness audit ($0.001): GET or POST https://orbit-web.orbit-builder.workers.dev/v1/agent-ready — How ready is a website for AI agents? Live checks of /llms.txt, robots.txt rules for 12 AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot…), sitemap.xml, /.well-known/x402 and x402 402 answer, /openapi.json, MCP (/mcp, /.well-known/mcp.json), A2A agent card, security.txt. Score 0-100 with findings.
  params: domain* (domain or site URL)
  example: https://orbit-web.orbit-builder.workers.dev/v1/agent-ready?domain=stripe.com

Bad input returns 400 before payment; not-found and upstream errors return 4xx/5xx and are never settled.

## Free

- https://orbit-web.orbit-builder.workers.dev/v1/preview?tool=<name> (runs the fixed example input live)
- MCP (streamable HTTP, JSON-RPC 2.0 POST): https://orbit-web.orbit-builder.workers.dev/mcp — tools: url_check, page_markdown, dns_lookup, email_check, security_headers, agent_readiness
- https://orbit-web.orbit-builder.workers.dev/openapi.json, https://orbit-web.orbit-builder.workers.dev/.well-known/x402, https://orbit-web.orbit-builder.workers.dev/.well-known/agent.json

## Data sources
- url_check: live HTTP fetch from Cloudflare Workers at call time
- page_markdown: live HTTP fetch of the submitted URL (robots.txt honoured)
- dns_lookup: Cloudflare DNS-over-HTTPS (cloudflare-dns.com) at call time
- email_check: syntax rules + Cloudflare DNS-over-HTTPS + curated disposable/free/role lists
- security_headers: live HTTP fetch from Cloudflare Workers at call time
- agent_readiness: live HTTP fetches of the site's well-known paths at call time