# Bonafido by CyberMax

> Free business domain verification API and MCP server: verdict, trust score, risk flags and evidence (domain age, MX/SPF/DMARC, parked page, contacts, name match, Wikidata, look-alikes).

Give a domain, URL or email, optionally with the company you expect. Bonafido checks DNS, domain age, mail setup, the live homepage, parked or for-sale pages, contact details, the company-name match, Wikidata and look-alike domains, then gives a verdict, a 0-100 trust score and evidence you can quote.

## API (free, no key, CORS enabled)
- [/api/verify](https://bonafido.cybermax-tools.workers.dev/api/verify?domain=stripe.com&company=Stripe): Verify up to 5 business domains (optionally against a company name)
- GET for simple calls, POST a JSON body for lists. Same field names as the bulk version's dataset records.
- OpenAPI 3.1: https://bonafido.cybermax-tools.workers.dev/openapi.json

## MCP (remote, streamable HTTP, no auth)
- Endpoint: https://bonafido.cybermax-tools.workers.dev/mcp
- `verify_domain`: Verify a business domain, URL or email domain: does it resolve, how old is it (RDAP), mail setup (MX/SPF/DMARC), live homepage vs parked/for-sale page, redirects, contact details, company-name match, Wikidata official website and look-alike detection. Returns verdict (verified/likely_legit/unverified/suspicious/not_found), trustScore 0-100, riskFlags and evidence. Pass company_name to check the domain belongs to that company. Up to 5 domains via "domains".

## Limits
- 10 calls per minute per IP address.
- Up to 5 domains per call.
- One contact page is read per domain (none when you send more than 3).
- About 15 seconds per call at most.
- Free, no key. Information only, not a guarantee or legal advice.

## More
- Health: https://bonafido.cybermax-tools.workers.dev/health
- All CyberMax tools: https://cybermax-tools-cybermax.static.hf.space/
- A bulk and scheduled version is coming to the Apify Store.