{"uid":"cap_ffPXrbxCM5C-0n6_La7bh","slug":"tls-certificate-inspector-b317172d","name":"TLS Certificate Inspector","description":"Open a TLS connection to a host and report its certificate — issuer, subject, validity window, days remaining, SANs, fingerprint and trust status.","url":"https://tls.openverbs.com/v1/inspect","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["host"],"properties":{"host":{"type":"string","maxLength":253,"minLength":1,"description":"Hostname to connect to, e.g. \"github.com\"."},"port":{"type":"integer","maximum":65535,"minimum":1,"description":"TLS port. Defaults to 443."},"servername":{"type":"string","description":"SNI server name, if different from host."}},"additionalProperties":false},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.006","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.006/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.006","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.006","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_2rbAIXE-TTZhlySC84NMP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.006","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Opens a TLS connection to a given hostname and returns its certificate details: issuer, subject, validity window, days remaining, SANs, fingerprint, and trust status.","exampleAgentPrompt":"Can you inspect the TLS certificate for api.mycompany.com on port 443 and tell me who issued it, when it expires, and how many days are left?","exampleUseCases":[{"title":"Certificate expiry monitoring alert","prompt":"Check the TLS certificate on shop.example.com and tell me how many days until it expires and whether it's currently trusted — I want to know if we're at risk of it running out soon."},{"title":"Verify new deployment certificate","prompt":"We just deployed our API server at api.acme.io on port 8443 — can you inspect its TLS certificate and confirm the issuer, subject, and that it's valid and trusted?"},{"title":"Audit SAN coverage for a domain","prompt":"Pull the TLS certificate details for mail.myorg.com and show me all the Subject Alternative Names listed on it — I need to see which hostnames it covers."}],"resultDescription":"Returns TLS certificate metadata for the given host, including the issuer (CA), subject (domain name), validity window (not-before and not-after dates), days remaining until expiry, Subject Alternative Names (SANs), certificate fingerprint, and trust status indicating whether the cert chains to a trusted root.","failureModes":["Host unreachable or connection refused — returns error indicating the host could not be connected to","TLS handshake failure — if the server does not support TLS or the handshake fails","Invalid hostname format — if the host field is empty or malformed","Port out of range — if port is not between 1 and 65535","Self-signed or untrusted certificate — returned in trust status field rather than as an error","SNI mismatch — cert returned may not match the servername if misconfigured"],"whenToPreferThis":"Use this endpoint when you need to programmatically retrieve raw TLS certificate details — expiry, issuer, SANs, fingerprint, and trust status — for any hostname, including non-standard ports or custom SNI names. Prefer this over generic HTTPS-check tools when you need structured certificate metadata rather than just a pass/fail status.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:34:26.605Z","isFirstParty":false}