{"uid":"cap_3FIr7xtebjYE9Ea1HSXuD","slug":"broker-ssl-audit-domain-osint-tls-certificate-security-headers-recon-8715a9e7","name":"broker-ssl-audit: Domain OSINT, TLS Certificate & Security Headers Recon","description":"Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/ssl-audit)","url":"https://x402broker.com/v1/ssl-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","minLength":1,"description":"Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"unknown","protocol":"x402","network":"base","amountUsd":null,"per":"call","confidence":"unknown"},{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_r3rUwARYLsYnalFhyu670","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null},{"uid":"pm_KPUhHi3adS2K-DS7jdLa7","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Inspects a domain's live DNS resolution (IPv4/IPv6), TLS certificate details (issuer, expiry), and HTTP security headers grade for OSINT and security auditing.","exampleAgentPrompt":"Can you do a full SSL and security headers audit on stripe.com — I want to see the TLS certificate issuer, expiry date, DNS resolution, and overall HTTP security grade?","exampleUseCases":[{"title":"Pre-deployment security check","prompt":"Before we go live, can you audit the TLS certificate and HTTP security headers on api.mycompany.com and tell me if there are any issues I should know about?"},{"title":"Vendor due diligence OSINT","prompt":"I need to vet a third-party vendor — can you pull the DNS resolution, TLS cert issuer and expiry, and security headers grade for payments.vendorxyz.com?"},{"title":"Expired certificate monitoring","prompt":"Check whether the SSL certificate on legacy.clientportal.io is still valid and when it expires — I think it might have lapsed."}],"resultDescription":"Returns live DNS resolution results (IPv4/IPv6 addresses), TLS certificate details including issuer and expiry date, and an HTTP security headers grade reflecting the domain's security posture.","failureModes":["Domain does not exist or cannot be resolved — DNS lookup failure returned","Domain is reachable but does not serve HTTPS — TLS certificate data unavailable","Request missing required 'domain' query parameter — validation error","Target server times out during connection — timeout error returned","Invalid domain format provided — input validation error"],"whenToPreferThis":"Choose this endpoint when you need a quick, all-in-one OSINT snapshot of a domain's DNS resolution, TLS certificate health, and HTTP security headers without setting up your own scanning infrastructure. It is ideal for security audits, vendor due diligence, pre-deployment checks, or monitoring third-party domains for certificate expiry. Prefer it over generic whois tools when you specifically need live TLS and security header data in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:48:09.702Z","isFirstParty":false,"canonicalSlug":"broker-ssl-audit-domain-osint-tls-certificate-security-headers-recon-8715a9e7"}