{"uid":"cap_cMAXG3kfv6q7m79EcnOLL","slug":"netintel-ssl-analyzer-f9ce931e","name":"NetIntel SSL Analyzer","description":"Performs a TLS handshake to inspect the certificate chain, probes supported TLS versions (1.0–1.3), detects weak keys and expiry issues, and returns an overall security grade (A/B/C/F). For just the cert facts fast, see the cheaper /ssl/cert (quick tier).","url":"https://netintel.dev/ssl/analyze?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"port":{"type":"number","description":"Port to connect to (default: 443)"},"domain":{"type":"string","description":"Domain to analyze (e.g. example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"host":{"type":"string"},"port":{"type":"number"},"chain":{"type":"array"},"grade":{"type":"string"},"warnings":{"type":"array"},"connection":{"type":"object"},"certificate":{"type":"object"},"chain_valid":{"type":"boolean"}}}}}}},"responseSchema":{"type":"json","example":{"host":"example.com","port":443,"chain":[{"issuer":"DigiCert Global Root CA","subject":"DigiCert TLS RSA SHA256 2020 CA1","not_after":"Apr 13 23:59:59 2031 GMT","not_before":"Apr 14 00:00:00 2021 GMT"}],"grade":"A","warnings":[],"connection":{"cipher":"TLS_AES_256_GCM_SHA384","protocol":"TLSv1.3","supported_protocols":["TLS 1.2","TLS 1.3"]},"certificate":{"san":["example.com","www.example.com"],"issuer":{"country":"US","common_name":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"subject":{"country":"US","common_name":"example.com","organization":"Internet Corporation for Assigned Names and Numbers","organizational_unit":null},"version":3,"key_info":{"size":2048,"algorithm":"RSA"},"not_after":"Feb 13 23:59:59 2025 GMT","not_before":"Jan 13 00:00:00 2024 GMT","serial_number":"0FD078DD48F1A2BD4D0F2BA96B6038FE","signature_algorithm":"sha256WithRSAEncryption"},"chain_valid":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.007","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.007/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.007","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.007","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9NBhO5xdX6zPQjnasbgFA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.007","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes the SSL/TLS configuration of a domain, returning certificate details, cipher suites, protocol versions, chain validity, and a security grade.","exampleAgentPrompt":"Can you check the SSL/TLS setup for example.com — I want to see the security grade, which TLS versions are supported, the certificate chain, and any warnings?","exampleUseCases":null,"resultDescription":"Returns a JSON object with the domain host, port, an overall SSL security grade (e.g. 'A'), the connection details (cipher suite, protocol, supported protocols), the leaf certificate (subject, issuer, SANs, validity dates, key algorithm and size, serial number, signature algorithm), the certificate chain (intermediate/root CAs with validity dates), a boolean chain_valid flag, and an array of any SSL warnings.","failureModes":["Domain does not exist or is unreachable — connection error or timeout","Port not open or no TLS listener on the specified port — connection refused","Invalid domain format in query parameter — 400 bad request","Payment not provided or insufficient — 402 payment required","Self-signed or misconfigured certificate may cause chain_valid: false with warnings populated"],"whenToPreferThis":"Use this endpoint when you need a detailed, programmatic SSL/TLS audit of a specific domain — including certificate metadata, chain validation, supported protocol versions, and cipher grading — rather than just a simple certificate expiry check or a human-readable SSL report from a browser.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T00:45:01.706Z","isFirstParty":false,"canonicalSlug":"netintel-ssl-analyzer-f9ce931e"}