Every time a company onboards a new vendor, evaluates a supplier, or vets a potential partner, someone has to manually check a dozen different signals — domain age, email security records, SSL, legal pages, support availability, and more. That process is slow, inconsistent, and often skipped entirely.
The Vendor Trust Snapshot API automates all of it in a single call.
Send any domain and get back a structured JSON trust report with an overall score from 0 to 100, covering 13 individual signals across five categories.
WHAT IT CHECKS:
Domain Intelligence:
- Domain age in days and original registration date
- Sourced from public RDAP data
Email Authentication:
- SPF record presence and validity
- DMARC policy detection
- DKIM configuration check
Security Signals:
- HTTPS and SSL certificate validation
- security.txt file presence
- Trust center page detection
Legal Pages:
- Privacy policy detection
- Terms of service detection
- Cookie policy detection
- Refund/returns policy detection
Support Availability:
- Status page detection
- Contact page detection
- Support/help page detection
- Support email extraction
TRUST SCORE:
Every response includes a weighted trust_score from 0 to 100 and a trust_level label: low, moderate, high, or very high. Scores are calculated from all 13 signals using weighted criteria so you can rank and filter vendors programmatically.
WHO THIS IS FOR:
- Procurement teams automating vendor evaluation workflows
- Fintech and payment platforms vetting merchants before onboarding
- B2B marketplaces verifying seller legitimacy
- Compliance tools building automated vendor risk reports
- Developers building internal vendor dashboards or scoring tools
No manual research. No multiple tools. One domain in, one trust report out.
{"success":true,"domain":"stripe.com","checked_at":"2026-05-05T17:32:39.136Z","trust_score":92,"trust_level":"very high","domain_info":{"domain_age_days":11193,"domain_registered_date":"1995-09-12T04:00:00.000Z"},"email_auth":{"spf":true,"dmarc":true,"dkim":true},"security":{"https_enabled":true,"ssl_valid":true,"has_security_txt":false,"has_trust_center":true},"legal":{"has_privacy_policy":true,"has_terms_of_service":true,"has_cookie_policy":true,"has_refund_policy":false},"support":{"has_status_page":true,"has_contact_page":true,"has_support_page":true,"support_email":null},"signals_summary":{"total_signals_checked":13,"signals_passed":11,"signals_failed":2}}
curl --location --request GET 'https://zylalabs.com/api/12508/vendor+trust+snapshot+api/23808/check&domain=Required' --header 'Authorization: Bearer YOUR_API_KEY'
| Header | Description |
|---|---|
Authorization
|
[Required] Should be Bearer access_key. See "Your API Access Key" above when you are subscribed. |
No long-term commitment. Upgrade, downgrade, or cancel anytime. Free Trial includes up to 50 requests.
The API returns a comprehensive trust report for a given domain, including a trust score (0-100) and a trust level label. It covers 13 signals across five categories: domain intelligence, email authentication, security signals, legal pages, and support availability.
Key fields include `trust_score`, `trust_level`, `domain_info` (with `domain_age_days` and `domain_registered_date`), `email_auth`, `security`, `legal`, and `support`. Each category provides specific details about the vendor's trustworthiness.
The response is structured in JSON format, with a top-level object containing success status, domain checked, and a detailed breakdown of trust signals. Each category (domain, email, security, legal, support) is nested within the response for clarity.
The API provides information on domain age, email authentication (SPF, DMARC, DKIM), security features (HTTPS, SSL), legal compliance (privacy policy, terms of service), and support availability (contact pages, support emails).
Data accuracy is maintained through the use of public RDAP data for domain information and automated checks for email authentication and security signals. Regular updates and validation processes ensure the reliability of the information provided.
Typical use cases include procurement teams automating vendor evaluations, fintech platforms vetting merchants, B2B marketplaces verifying sellers, and compliance tools generating vendor risk reports, all benefiting from streamlined assessments.
Users can leverage the trust score and level to rank vendors programmatically, filter out low-trust options, and make informed decisions based on the detailed signals provided in the report, enhancing vendor management processes.
Users can expect a consistent structure in responses, with trust scores reflecting the cumulative assessment of signals. Common patterns include high scores for established domains with strong email and security practices, while newer or less compliant domains may score lower.
To obtain your API key, you first need to sign in to your account and subscribe to the API you want to use. Once subscribed, go to your Profile, open the Subscription section, and select the specific API. Your API key will be available there and can be used to authenticate your requests.
You can’t switch APIs during the free trial. If you subscribe to a different API, your trial will end and the new subscription will start as a paid plan.
If you don’t cancel before the 7th day, your free trial will end automatically and your subscription will switch to a paid plan under the same plan you originally subscribed to, meaning you will be charged and gain access to the API calls included in that plan.
The free trial ends when you reach 50 API requests or after 7 days, whichever comes first.
No, the free trial is available only once, so we recommend using it on the API that interests you the most. Most of our APIs offer a free trial, but some may not include this option.
Yes, we offer a 7-day free trial that allows you to make up to 50 API calls at no cost, so you can test our APIs without any commitment.
Zyla API Hub is like a big store for APIs, where you can find thousands of them all in one place. We also offer dedicated support and real-time monitoring of all APIs. Once you sign up, you can pick and choose which APIs you want to use. Just remember, each API needs its own subscription. But if you subscribe to multiple ones, you'll use the same key for all of them, making things easier for you.
Please have a look at our Refund Policy: https://zylalabs.com/terms#refund
Service Level:
100%
Response Time:
448ms
Service Level:
100%
Response Time:
2,202ms
Service Level:
100%
Response Time:
372ms
Service Level:
100%
Response Time:
606ms
Service Level:
100%
Response Time:
28ms
Service Level:
100%
Response Time:
172ms
Service Level:
100%
Response Time:
312ms
Service Level:
100%
Response Time:
2,216ms
Service Level:
100%
Response Time:
368ms
Service Level:
100%
Response Time:
434ms