{"uid":"cap_TUokxTsHe4K67c7X1HL4s","slug":"orioncmd-tls-certificate-check-a99ae66e","name":"OrionCMD TLS Certificate Check","description":"Pay-per-call website checks for agents: TLS certificate (from CT logs), DNS/email-auth, domain expiry, and a site-health bundle. Also available as an MCP server at /mcp.","url":"https://orioncmd-checks-mcp.dario-9fa.workers.dev/v1/cert?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Hostname or URL, e.g. example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"host":"example.com","found":true,"data_source":"Certificate Transparency logs via Cert Spotter (api.certspotter.com). Certificate details are from CT logs, NOT from the live served certificate.","newest_cert":{"issuer":"Let's Encrypt","days_left":50,"not_after":"2026-11-29T05:30:59Z","pct_lifetime_used":44},"renewal_stall":{"suspected":false},"live_https_probe":{"http_status":200,"handshake_ok":true}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bZJBDLZv0hftvOmHAGw-L","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up a domain's TLS certificate details from Certificate Transparency logs, including issuer, expiry, days remaining, lifetime usage, renewal stall detection, and a live HTTPS probe.","exampleAgentPrompt":"Can you check the TLS certificate status for stripe.com — I want to know who issued it, when it expires, how much of its lifetime is used up, and whether the live HTTPS connection looks healthy?","exampleUseCases":[{"title":"Pre-launch SSL certificate audit","prompt":"Before we go live tomorrow, check the TLS certificate for app.mycompany.com — tell me the issuer, how many days are left, and whether HTTPS is responding correctly."},{"title":"Monitoring renewal stall detection","prompt":"I'm worried our cert renewal script might have broken — can you check if the certificate for api.acmecorp.com shows any sign of a renewal stall and when it's set to expire?"},{"title":"Third-party vendor security check","prompt":"We're about to integrate with a new vendor — can you pull the certificate transparency info for payments.vendorsite.io and tell me who issued their cert and what percentage of its lifetime has been used?"}],"resultDescription":"Returns a JSON object containing: the queried host, whether a cert was found in CT logs, the data source attribution, newest certificate details (issuer, days_left, not_after timestamp, pct_lifetime_used), a renewal_stall suspected flag, and a live_https_probe result with HTTP status code and TLS handshake success indicator.","failureModes":["Domain not found in CT logs — returns found: false with no certificate data","Invalid or malformed domain input — likely returns an error or empty result","Domain with no public CT log entries (very rare or brand-new domain) — may return no data","Live HTTPS probe failure — handshake_ok: false or non-200 HTTP status if site is down","Rate limit or payment failure — HTTP 402 if payment not provided, or service error"],"whenToPreferThis":"Choose this endpoint when you need TLS certificate metadata sourced from Certificate Transparency logs rather than the live served certificate — ideal for auditing, monitoring expiry, detecting renewal stalls, or verifying a domain's HTTPS health without needing direct certificate negotiation. Particularly useful for agents that need a cheap ($0.01) per-call check without setting up infrastructure.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T00:35:05.537Z","isFirstParty":false,"canonicalSlug":"orioncmd-tls-certificate-check-a99ae66e"}