# ZoneProof

> ZoneProof is an independent domain and namespace trust index. It publishes machine-readable namespace policies, domain verification evidence, and DNS-verified BrandSets that connect an organization's primary domain with its verified related domains.

ZoneProof is an initiative by EnCirca, Inc. Baseline namespace records draw on public sources, including IANA root-zone data and registry policies. Confirmed namespace stewards can maintain first-party records. Domain owners can create a BrandSet using their primary domain in any supported TLD and prove control of each included domain through DNS TXT records.

## Key Pages

- [Home](https://zoneproof.org/): Ask about domain and namespace trust records and create a BrandSet.
- [Documentation](https://zoneproof.org/docs): MCP, REST, GraphQL, schemas, BrandSet embeds, and domain trust scoring.
- [Namespace claims](https://zoneproof.org/claim/namespace): Claim and maintain a namespace listing as its steward.
- [FAQ](https://zoneproof.org/faq): Common questions about ZoneProof records, claims, and integrations.
- [Contact](https://zoneproof.org/contact): Contact form for inquiries and issue reports.

## Complete Public Indexes

- [Data & AI access](https://zoneproof.org/data): Discovery instructions for crawlers and agents.
- [Namespace index](https://zoneproof.org/api/discovery/namespaces): Active TLDs and supported delegated namespaces, with pageUrl and recordUrl for each entry.
- [Verified BrandSet index](https://zoneproof.org/api/discovery/brandsets): Public BrandSet IDs, primary domains, verified domains, pageUrl, recordUrl, and domainSetUrl. Pending and lapsed BrandSets are excluded.

Each index returns up to 100 items and an absolute next URL. Follow next until it is null, even if a page has no items. A 503 response means temporarily unavailable; retry rather than treating it as an empty index. Data can change during traversal. Fetch recordUrl for the current full record and domainSetUrl for the BrandSet manifest. For any verified member domain, fetch https://zoneproof.org/.well-known/domain/DOMAIN.json or visit https://zoneproof.org/domains/DOMAIN. DNS verification indicates domain control, not verified legal identity.

## Domain Records and BrandSets

Retrieve a canonical `zp:DomainRecord` at `https://zoneproof.org/.well-known/domain/DOMAIN.json` or with the MCP tool `get_zoneproof_domain`. Records expose namespace policy, available entity and credential data, BrandSet relationships, and separate registry and DNS verification evidence. ZoneProof-owned fields use the `zp:` prefix.

Retrieve a BrandSet's domain-set manifest using the index's domainSetUrl, shaped as `https://zoneproof.org/.well-known/domain-set/PUBLIC_ID`. Use the public BrandSet ID from the index. The manifest includes its primary domain, verified members, verification status, and, when verified, public Brand Details and per-domain trust evidence. A verified primary activates the BrandSet; pending members do not block it and are not published as verified members. The manifest remains available while verification is pending or needs reverification, with empty members and no entity/trust assertions until the primary proof is verified.

For a compact JSON-LD embed projection, retrieve `https://zoneproof.org/api/brandsets/PUBLIC_ID/embed?format=jsonld`. Without the format parameter this endpoint returns an embeddable script. Deleted, unavailable, or unverified BrandSets return no embed data.

## Interpreting Verification and Trust

- `zp:registryVerification` reports domain registry eligibility verification. A restricted namespace alone does not establish that a particular domain has been verified.
- `zp:brandSetVerification` reports DNS TXT verification, primary/member role, and current status. DNS control does not establish legal identity or transfer credentials between domains.
- `zp:trust` contains the versioned domain trust model, classification, score, and supporting signals. Entity credentials carry their own verification and contribute to entity trust, not a member domain's intrinsic trust.
- A domain trust score describes recorded verification evidence. It is not a probability or website safety rating; missing evidence does not establish that a domain is unsafe. Preserve the model, classification, and signals when presenting a score.

- [Domain trust scoring explanation](https://zoneproof.org/docs#domain-trust-score): Calculation and interpretation.
- [Machine-readable scoring model](https://zoneproof.org/trust/domain-score.json): Current model, scoring tiers, and verification rules.

## Machine-Readable Resources

- [JSON-LD context](https://zoneproof.org/schema/context.jsonld): Shared JSON-LD vocabulary context for ZoneProof records.
- [Namespace record schema](https://zoneproof.org/schema/namespace-record-v1.json): JSON Schema for TLD and namespace records.
- [Domain record schema](https://zoneproof.org/schema/domain-record-v1.json): JSON Schema for canonical `zp:DomainRecord` public domain profiles. ZoneProof-owned fields use the `zp:` prefix; the record exposes one canonical `zp:entity`, optional `zp:entityParent` and `zp:credentials`, `zp:domainSet`, and the domain's per-TLD `zp:namespacePolicy` consistently across MCP, JSON-LD embeds, and public APIs.
- [Entity record schema](https://zoneproof.org/schema/entity-record-v1.json): JSON Schema for entity records linked to namespace and domain data.
- [Credential record schema](https://zoneproof.org/schema/credential-record-v1.json): JSON Schema for credential records.
- [OpenAPI document](https://zoneproof.org/docs/openapi.json): REST API contract.

## Namespace Examples

- [.bank namespace record](https://zoneproof.org/.well-known/tld/bank.json): Restricted financial namespace record.
- [.cpa namespace record](https://zoneproof.org/.well-known/tld/cpa.json): Restricted professional namespace record.
- [.pharmacy namespace record](https://zoneproof.org/.well-known/tld/pharmacy.json): Restricted healthcare namespace record.
- [.com namespace record](https://zoneproof.org/.well-known/tld/com.json): Established generic TLD namespace record.

## APIs and Agent Interfaces

- [MCP endpoint](https://mcp.zoneproof.org/mcp): Streamable HTTP Model Context Protocol endpoint for namespace, domain, entity, and verification queries. Use tools/list to discover the current read-only tools and their arguments.

## Optional

- [Sitemap](https://zoneproof.org/sitemap.xml): Sitemap index linking to smaller sitemaps for public pages, supported namespaces, and verified BrandSet domain pages.
- [Robots policy](https://zoneproof.org/robots.txt): Crawl policy for general web crawlers.