{"uid":"cap_BJ21i6-Jii5ojtZplq_zq","slug":"sitecheck-web-intel-ssl-certificate-chain-audit-8548db8d","name":"SiteCheck Web Intel SSL Certificate Chain Audit","description":"HTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartbleed/POODLE/BEAST flags and HSTS. Only reads reports SSL Labs already has, so a host that was never scanned returns a retry error instead of a new scan.","url":"https://api.webintel-api.workers.dev/api/security/ssl-cert-chain?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["host"],"properties":{"host":{"type":"string","description":"Host name such as wikipedia.org (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_IO87qvSLX1qHaH2W5hhk7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves a cached SSL Labs report for a host including TLS grade, certificate chain details, cipher strengths, vulnerability flags (Heartbleed/POODLE/BEAST), and HSTS status","exampleAgentPrompt":"Can you pull the SSL Labs security report for github.com and tell me the grade, whether it has any weak ciphers, and if it's vulnerable to Heartbleed or POODLE?","exampleUseCases":[{"title":"Pre-launch SSL compliance check","prompt":"Before we go live, check the SSL certificate chain and TLS grade for api.mycompany.com — I want to know the grade, any weak ciphers, and whether HSTS is enabled."},{"title":"Vendor security due diligence","prompt":"I'm evaluating a third-party vendor at payments.acmecorp.com — can you pull their SSL Labs report and flag any Heartbleed, POODLE, or BEAST vulnerabilities and tell me their overall TLS grade?"},{"title":"Monitoring certificate chain health","prompt":"Run an SSL audit on store.example.com and tell me how many certificates are in the chain, which TLS versions are supported, and whether the trust store checks out."}],"resultDescription":"Returns the cached Qualys SSL Labs report for the specified host including: overall TLS/SSL grade (A through F), number of certificates in the chain, trust store validation status, supported TLS versions, count of weak ciphers, boolean flags for Heartbleed, POODLE, and BEAST vulnerabilities, and HSTS presence. If the host has never been scanned by SSL Labs, returns a retry error rather than initiating a new scan.","failureModes":["Host never scanned by SSL Labs — returns retry error instead of results","Invalid or unresolvable hostname — request rejected","Host does not have port 443 open — no SSL data available","SSL Labs cache may be stale for recently updated certificate configurations","Rate limiting from underlying SSL Labs API may cause transient errors"],"whenToPreferThis":"Use this endpoint when you need a quick, structured TLS/SSL security audit for a known public hostname without waiting for a live scan. Ideal for security posture checks, vendor assessments, and compliance pipelines where Qualys SSL Labs coverage is likely (major sites, well-known domains). Prefer this over initiating a new SSL Labs scan when latency matters and the host is likely already cached. Not suitable for brand-new or obscure hosts that SSL Labs may never have scanned.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-25T12:30:05.120Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-ssl-certificate-chain-audit-8548db8d"}