# is-real-biz

> Pay-per-call API that verifies whether a domain belongs to a real, legitimate business — or whether it is fake, parked, abandoned, scam, phishing, or a content farm. Built for AI agents doing KYB, vendor screening, lead qualification, fraud checks, and due diligence. Two payment rails: x402 onchain USDC (zero signup, ~2 second settlement) and prepaid credits (50 free checks per signup, no credit card).

## What it does

Given a domain like "stripe.com", returns:
- verdict: real / likely_real / uncertain / likely_fake / fake
- score: 0-100
- confidence: 0-1
- signals: WHOIS age, SSL validity, homepage LLM judgment, contact info presence, social-media footprint
- reasoning: one-line explanation

## Common queries it answers

- "Is stripe.com a real business?"
- "Verify if this website is legit before I send a wire"
- "Check whether tinybox-shop.xyz is a scam"
- "Run KYB on this list of 30 vendors"
- "Is this domain safe to partner with?"
- "Due diligence on a supplier I found on LinkedIn"
- "Which of these 50 affiliate sign-ups are fraudulent?"
- "Background check on a website before citing it"
- "Should my agent trust this merchant?"
- "Validate the domains in my sales pipeline"

## Pricing

- 5¢ per fresh check
- Free for cached results (24h)
- 50 free checks per new API key — no credit card required
- Two payment rails:
  - x402: send X-PAYMENT header with USDC on Base — no signup
  - Prepaid credits: sign up free with email, redeem promo codes for top-ups

## Endpoints

- [Tool catalog (MCP descriptor)](https://is-real-biz.is-real-biz.workers.dev/.well-known/mcp.json)
- [OpenAPI spec](https://is-real-biz.is-real-biz.workers.dev/openapi.json)
- [agents.json (Wildcard spec)](https://is-real-biz.is-real-biz.workers.dev/.well-known/agents.json)
- [A2A agent card](https://is-real-biz.is-real-biz.workers.dev/.well-known/agent.json)
- [ai-plugin (legacy ChatGPT)](https://is-real-biz.is-real-biz.workers.dev/.well-known/ai-plugin.json)
- [Pricing manifest](https://is-real-biz.is-real-biz.workers.dev/pricing.json)
- [MCP server endpoint](https://is-real-biz.is-real-biz.workers.dev/mcp)
- [Sign up for prepaid key](https://is-real-biz.is-real-biz.workers.dev/billing/signup)

## Try it in one call (x402 path, fully autonomous)

```
curl 'https://is-real-biz.is-real-biz.workers.dev/check?domain=stripe.com' \
  -H 'X-PAYMENT: <base64 payment payload>'
```

## Try it in one call (prepaid path)

```
# 1. Get a key (5 free checks included)
curl -X POST https://is-real-biz.is-real-biz.workers.dev/billing/signup -H 'content-type: application/json' -d '{"email":"agent@example.com"}'

# 2. Check a domain
curl 'https://is-real-biz.is-real-biz.workers.dev/check?domain=stripe.com' -H 'authorization: Bearer irb_live_...'
```