# Bonafido by CyberMax

> Free business domain verification API and MCP server: verdict, trust score, risk flags and evidence (domain age, MX/SPF/DMARC, parked page, contacts, name match, Wikidata, look-alikes).

> Paid API keys from $19/month (Check: 1,500 checks a month); free tier 20 checks a day per IP with no key. Buy: https://bonafido.cybermaxtools.com/buy/check?s=lead · all plans: https://bonafido.cybermaxtools.com/docs#pricing

Give a domain, URL or email, optionally with the company you expect. Bonafido checks DNS, domain age, mail setup, the live homepage, parked or for-sale pages, contact details, the company-name match, Wikidata and look-alike domains, then gives a verdict, a 0-100 trust score and evidence you can quote.

## API (free tier without a key; paid API keys for more)
- [/api/verify](https://bonafido.cybermaxtools.com/api/verify?domain=stripe.com&company=Stripe): Verify up to 5 business domains (optionally against a company name)
- GET for simple calls, POST a JSON body for lists. Same field names as the bulk version's dataset records.
- OpenAPI 3.1: https://bonafido.cybermaxtools.com/openapi.json

## MCP (remote, streamable HTTP, no auth)
- Endpoint: https://bonafido.cybermaxtools.com/mcp
- `verify_domain`: Verify a business domain, URL or email domain: does it resolve, how old is it (RDAP), mail setup (MX/SPF/DMARC), live homepage vs parked/for-sale page, redirects, contact details, company-name match, Wikidata official website and look-alike detection. Returns verdict (verified/likely_legit/unverified/suspicious/not_found), trustScore 0-100, riskFlags and evidence. Pass company_name to check the domain belongs to that company. Up to 5 domains via "domains".

## Limits
- 10 calls per minute per IP address.
- Up to 5 domains per call.
- One contact page is read per domain (none when you send more than 3).
- About 15 seconds per call at most.
- Free, no key. Information only, not a guarantee or legal advice.

## More
- Health: https://bonafido.cybermaxtools.com/health
- All CyberMax tools: https://cybermax-tools-cybermax.static.hf.space/
- A bulk and scheduled version is coming to the Apify Store.

## Pricing
- Free: 20 checks a day per IP, 10/min, no key.
- Check: $19/month, 1,500 checks a month, 30/min. Buy: https://bonafido.cybermaxtools.com/buy/check?s=llms
- Team: $49/month, 5,000 checks a month, 60/min. Buy: https://bonafido.cybermaxtools.com/buy/team?s=llms
- Business: $99/month, 12,000 checks a month, 120/min. Buy: https://bonafido.cybermaxtools.com/buy/business?s=llms
- Pay as you go: $5, 250 checks (one-time pack, no expiry), 30/min. Buy: https://bonafido.cybermaxtools.com/buy/payg?s=llms
- Check yearly: $190/year, 1,500 checks a month, 30/min. Buy: https://bonafido.cybermaxtools.com/buy/check-yearly?s=llms
- Team yearly: $490/year, 5,000 checks a month, 60/min. Buy: https://bonafido.cybermaxtools.com/buy/team-yearly?s=llms
- Business yearly: $990/year, 12,000 checks a month, 120/min. Buy: https://bonafido.cybermaxtools.com/buy/business-yearly?s=llms
- Using several CyberMax APIs? CyberMax API All-Access: one key for all 10 APIs (this one included, 1,500 checks a month here) for $119/month. https://api-all-access.cybermaxtools.com/
- Use the key as `x-api-key: KEY` or `Authorization: Bearer KEY` (MCP too). Usage: https://bonafido.cybermaxtools.com/key. Machine-readable: https://bonafido.cybermaxtools.com/pricing.json

## Pay per call (x402, USDC on Base): for AI agents, no key, no account
- $0.025 per call, paid in USDC on Base (x402 "exact" scheme, v1 and v2).
- https://bonafido.cybermaxtools.com/x402/api/verify: same as /api/verify, always pay-per-call (an unpaid call returns HTTP 402 with the payment requirements).
- Plain endpoints keep the free tier and API keys; with no key, they also answer 402 (instead of 429) once the free daily quota is used.
- Send the signed payment as X-PAYMENT (v1) or PAYMENT-SIGNATURE (v2); the receipt comes back in X-PAYMENT-RESPONSE / PAYMENT-RESPONSE. Failed calls are not charged.