Kit Rx

npx add-mcp 'https://api.kit-rx.com/mcp'

Kit Rx API docs

Kit Rx serves compact, ready-to-use JSON reports built from authoritative public sources: FDA drug labeling, RxNorm, FDA shortages and recalls, CMS NADAC drug acquisition prices, NDC normalization; company profiles (Wikidata, GLEIF LEI) and SEC EDGAR filings with key financials; domain due-diligence, WHOIS (RDAP), DNS and email-authentication checks; website and agent-readiness checks; US address geography and NWS weather and alerts; email address checks; and x402 tools (a pre-payment check of any paid endpoint and a $0.002 receipt for testing clients). Each call is a single x402 payment in USDC on Base, Polygon, Arbitrum, Avalanche or Sei, over HTTP or the MCP server at /mcp. Requests that fail or match nothing are not charged.

• Drug card: RxNorm, FDA label, DEA schedule, shortages ($0.02): GET /v1/rx/drug. Drug card for a generic or brand name: NLM RxNorm concept (RxCUI, ingredients, brands); one openFDA label (brand checked against RxNorm ingredients, else single-ingredient full prescribing info, most common route, earliest NDA/BLA) with clipped boxed warning, indications, dosing, contraindications, warnings, interactions, pregnancy, lactation, special-formulation flag, other routes, DailyMed link; DEA schedule and status (NDC data); FDA shortage and 2-year recall summaries.
• FDA drug shortages ($0.01): GET /v1/rx/shortages. FDA drug shortage records from openFDA, most recently updated first, with optional drug-name and status filters (current, to be discontinued, resolved). Name filters match every word in generic name, brand or presentation, plus RxNorm ingredients for brand names. Entries give generic name, presentation, dosage form, status, availability, related info, reason, therapeutic category, company, ISO dates and package NDC, plus counts by status and an in_shortage flag.
• FDA drug recalls (enforcement reports) ($0.01): GET /v1/rx/recalls. FDA drug recall enforcement reports from openFDA, newest report first, filtered by optional drug, brand or firm text (every word must match; brand names also match their RxNorm ingredients), look-back months and FDA classification (I, II, III). Entries include recall number, classification, status, product description, reason, recalling firm, distribution pattern, initiation and report dates (ISO) and voluntary or mandated status, plus counts by classification.
• NDC format converter (10 to 11 digit) ($0.002): GET /v1/rx/ndc-convert. Converts a National Drug Code between FDA 10-digit layouts (4-4-2, 5-3-2, 5-4-1) and the HIPAA 11-digit 5-4-2 form, dashed or undashed. Ambiguous undashed 10-digit input is resolved against NLM RxNav by checking all three possible layouts. Returns ndc11, ndc11_dashed, ndc10, product_ndc, segment_format, resolution method, candidate layouts, and RxNav status (ACTIVE, OBSOLETE, ALIEN, UNKNOWN) with RxCUI and concept name.
• NDC product lookup with price and recalls ($0.02): GET /v1/rx/ndc. Full product record for one package NDC: normalized NDC forms; RxNav status, RxCUI, concept name and history; labeler, marketing category, status and dates, application number, DEA schedule, imprint, color, shape and size from RxNav; brand and generic name, dosage form, route, active ingredients with strengths and package description from the openFDA NDC Directory; latest CMS NADAC unit cost; openFDA recall enforcement reports from the last 36 months.
• Drug acquisition cost (CMS NADAC) ($0.01): GET /v1/rx/price. Latest CMS NADAC (National Average Drug Acquisition Cost) per-unit prices for a drug name, brand name or NDC, from data.medicaid.gov (monthly pharmacy invoice survey, weekly files). Groups by NADAC description, pricing unit (EA, ML, GM), generic or brand rate class and OTC flag, each with min, median and max unit cost across NDCs, effective date, NDC count, sample NDCs, and a 30-unit acquisition cost for per-dose EA items. Single-source generics map to RxNorm brand names.
• Domain due-diligence and risk report ($0.01): GET /v1/domain/report. Due-diligence report on a website, merchant or counterparty domain: registrable domain, registry RDAP facts (registrar, abuse contact, created, expiry, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CAA) from Cloudflare DNS over HTTPS, SPF and DMARC posture, a live web probe (redirect chain, HTTPS, HSTS, site-supplied title, parked or for-sale signs), brand-impersonation checks, and a 0-100 risk score with transparent weighted signals and a verdict.
• Domain registration facts (RDAP whois) ($0.003): GET /v1/domain/whois. Registration facts for a domain from its registry's RDAP server, located through the IANA bootstrap file: registrar name, IANA ID and abuse contact, created, updated and expiry dates, age and days to expiry, EPP status codes, transfer lock, nameservers, DNSSEC delegation flag, and the registry RDAP URL and terms link. No registrant contact data. Registries whose terms bar reuse (Nominet, CentralNic, Google Registry) are not queried.
• DNS records for a domain ($0.003): GET /v1/domain/dns. Current DNS records for a hostname from Cloudflare DNS over HTTPS: A, AAAA, CNAME chain, MX with priority and null-MX flag, NS, TXT (up to 25 records of at most 400 characters, email addresses redacted), CAA as flag, tag and value, and SOA primary nameserver, serial and timers, each with its minimum TTL. An optional type parameter limits the answer to one record type. For subdomains without their own zone, NS and SOA come from the registrable domain.
• Email authentication posture (SPF, DMARC, MTA-STS) ($0.003): GET /v1/domain/email-auth. Email authentication posture of a domain from DNS (Cloudflare DNS over HTTPS): MX records and null MX, SPF parsed into mechanisms with its all qualifier and a recursive DNS-lookup count against the RFC 7208 limit of 10, DMARC policy (p, sp, pct, alignment, report addresses' domains), MTA-STS and TLS-RPT records, and BIMI. DKIM is not assessed because selectors cannot be enumerated. Returns an A-F grade and 0-100 score with weighted reasons.
• Company profile from Wikidata and LEI records ($0.01): GET /v1/company/profile. Company card for a domain or name. From Wikidata: QID, label, description, websites, inception, industries, headquarters, country, latest employee count, parent organizations, stock listings and tickers, founders (names only), legal form, LEI. From GLEIF when an LEI is known or a legal name matches exactly: legal name, jurisdiction, entity and registration status, legal and HQ city/country, parents. With match method and confidence. Sources: Wikidata, GLEIF (CC0).
• Company filings and key financials from SEC EDGAR ($0.01): GET /v1/sec/filings. SEC EDGAR profile and latest filings for a ticker or CIK: company name, CIK, SIC code and industry, fiscal year end, state of incorporation, tickers and exchanges, plus the newest filings of selected forms (10-K, 10-Q, 8-K, 20-F, 6-K, S-1, DEF 14A, 4, 13F-HR, SC 13G) with filing and report dates, accession number, 8-K items and primary document URL. Optional latest XBRL revenue, net income, total assets and cash. Sources: SEC EDGAR submissions and XBRL APIs.
• Website check: redirects, headers, SEO, agent readiness ($0.005): GET /v1/web/check. Facts about a URL from a live fetch, never its body: final URL, status and chain after up to 5 validated redirects, response time, content type, server, security headers present/missing (HSTS, CSP, nosniff, framing, Referrer-Policy, Permissions-Policy), title, description, canonical, lang, Open Graph, robots meta, robots.txt rules for GPTBot, ClaudeBot, Google-Extended, CCBot, PerplexityBot, *, llms.txt, agent card, OpenAPI, x402 discovery, 402 terms. DNS via Cloudflare DoH.
• US address geocode with Census geographies ($0.005): GET /v1/geo/us-address. Geocodes a one-line US address, or reverse-geocodes a lat/lon point, to coordinates and the Census geographies containing it: state and county FIPS, county subdivision, place, tract, block group, block, ZCTA, congressional and state legislative districts, school districts, urban area, metro or micro area, metro division, CSA, PUMA, census region and division, plus ground elevation in feet. Sources: US Census Geocoder (current benchmark), USGS 3DEP elevation service (EPQS).
• US weather forecast and active alerts (NWS) ($0.005): GET /v1/geo/weather. Weather forecast and active alerts for a US address or lat/lon point: NWS office, grid, forecast and county zones, time zone; 7-day periods (temperature, wind, precipitation chance, short and detailed forecast) or, with hourly=true, the next 24 hours adding humidity and dew point; active watches, warnings and advisories with event, severity, urgency, certainty, headline, timing and area. Sources: NOAA National Weather Service API, US Census Geocoder for addresses.
• Email address verification (syntax, MX, risk flags) ($0.003): GET /v1/email/verify. Checks an email address without sending mail: syntax rules (IDN domains in punycode and Unicode), MX records by preference, null MX (RFC 7505), implicit A/AAAA fallback, NXDOMAIN, SPF and DMARC policy, disposable, role, free-webmail and +tag flags, mail provider from MX hosts, and typo suggestions for popular domains. Returns a verdict and 0-100 score with reasons. Mailbox existence is not confirmed. Sources: Cloudflare DNS over HTTPS, disposable-email-domains (CC0).
• x402 payment receipt: decode the payment you sent ($0.002): GET /v1/x402/receipt. Decodes the x402 v2 PAYMENT-SIGNATURE header sent with the request into a readable receipt: x402 version, scheme, CAIP-2 network and chain name, resource URL, the copied payment requirements, payer, recipient, value in atomic units and USD, USDC contract, nonce, validity window in ISO-8601 with seconds to expiry, signature length and prefix, extension keys, and pass/fail diagnostics. Computed locally, no upstream source.
• x402 preflight: inspect a paid endpoint before paying ($0.005): GET /v1/x402/preflight. Sends an unpaid GET to an x402 endpoint and reports what it would charge before any payment: HTTP status and redirects (max 3, re-validated), x402 v2 PAYMENT-REQUIRED header or v1 body challenge and its validity, each accepts entry (scheme, CAIP-2 network and name, atomic amount, USD for canonical USDC, asset check, payTo, timeout, EIP-712 name/version), resource, Bazaar extension, risk flags, and host context from registry RDAP (registrar, domain age) and Cloudflare DoH.