{"uid":"cap_SYCuTNKNmfG_7u4yNte2s","slug":"agentstoolshub-ssl-inspector-6ba8b462","name":"AgentsToolsHub SSL Inspector","description":"Inspect a live TLS certificate: subject, issuer, SAN domains, validity window, days to expiry, protocol version, cipher and the full chain length. Read directly from a TLS handshake — the definitive check an agent should run before trusting an API endpoint. Use this when an agent needs to cert details, chain, expiry — straight from the socket.","url":"https://agentstoolshub.com/api/v1/security/ssl-inspector?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"port":{"type":"number","description":"Port"},"domain":{"type":"string","description":"Domain"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_n8XSgmrSvRqqwGddMqhfa","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Inspects a live TLS certificate for a domain by performing a real TLS handshake, returning subject, issuer, SANs, validity window, days to expiry, protocol version, cipher suite, and chain length.","exampleAgentPrompt":"Can you inspect the live TLS certificate for api.stripe.com and tell me the subject, issuer, SAN domains, how many days until it expires, what protocol version and cipher it's using, and the full chain length?","exampleUseCases":[{"title":"Pre-trust API endpoint certificate check","prompt":"Before my agent starts calling https://api.openai.com, can you pull the live TLS certificate and tell me the issuer, SAN domains, expiry date, and cipher suite so I can confirm it's legitimate?"},{"title":"Monitor SSL certificate expiry for production domain","prompt":"Check the TLS certificate on payments.mycompany.com port 443 — how many days until it expires and is the certificate chain valid?"},{"title":"Audit TLS protocol version for security compliance","prompt":"I need to verify that checkout.example.com is using TLS 1.3 and not an older protocol — can you do a live TLS handshake and report the protocol version and cipher suite?"}],"resultDescription":"Returns structured TLS certificate data extracted directly from a live handshake: certificate subject (CN, O, etc.), issuer details, Subject Alternative Names (SAN domains), validity window (not-before and not-after dates), days remaining until expiry, TLS protocol version (e.g. TLSv1.3), negotiated cipher suite, and the full certificate chain length.","failureModes":["Domain not found or DNS resolution failure — endpoint returns error if the domain does not resolve","Connection timeout — if the server does not respond to a TLS handshake within the timeout window","Invalid or self-signed certificate — may return partial data or error if handshake cannot complete","Wrong port — if no TLS service is running on the specified port, connection will be refused","Domain parameter missing — request fails validation if required domain query param is absent"],"whenToPreferThis":"Use this endpoint when an agent needs to verify the authenticity and health of an API or web server before trusting it, check certificate expiry proactively, audit TLS configuration for security compliance, or extract SAN domains and issuer metadata directly from a live socket rather than relying on cached or third-party certificate databases.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:40:24.047Z","isFirstParty":false,"canonicalSlug":"agentstoolshub-ssl-inspector-6ba8b462"}