{"uid":"cap_gdiY1PYxPyb7LNEgaRTWJ","slug":"sitecheck-web-intel-tls-cipher-enumeration-d7e1cbda","name":"SiteCheck Web Intel TLS/Cipher Enumeration","description":"TLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Reads existing reports only; a host that was never scanned returns a retry error.","url":"https://api.webintel-api.workers.dev/api/security/tls-cipher-enum?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["host"],"properties":{"host":{"type":"string","description":"Host name such as wikipedia.org (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Rjrp36-7k7imTj2480RTK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns TLS protocol support and cipher-suite strength for a hostname using cached Qualys SSL Labs data, flagging deprecated protocols and weak ciphers.","exampleAgentPrompt":"Can you check what TLS versions and cipher suites github.com accepts, and flag any deprecated protocols like SSL 3 or TLS 1.0 and any weak ciphers like RC4 or 3DES?","exampleUseCases":[{"title":"Pre-deployment TLS security audit","prompt":"Before we go live, check what TLS protocols and cipher suites api.mycompany.com supports and tell me if there are any weak or deprecated configurations like TLS 1.0, RC4, or NULL ciphers."},{"title":"Compliance check for PCI-DSS","prompt":"We need to verify that payments.acmeshop.com doesn't accept SSL 3 or TLS 1.0/1.1 anymore for compliance — can you pull its TLS and cipher suite info and flag anything deprecated?"},{"title":"Vendor security vetting","prompt":"I'm evaluating a third-party vendor — can you look up the TLS configuration for partnerportal.vendorcorp.com and tell me if they offer forward secrecy and whether they're using any weak cipher suites?"}],"resultDescription":"Returns the set of TLS protocol versions the host accepts (with SSL 3, TLS 1.0, and TLS 1.1 flagged as deprecated), cipher suite counts per protocol, identification of weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Data is sourced from a cached Qualys SSL Labs report; if the host has never been scanned, a retry error is returned.","failureModes":["Host has never been scanned by Qualys SSL Labs — returns a retry/not-found error with no data","Invalid or non-resolvable hostname returns an error","Missing required 'host' query parameter causes a validation error","Stale cached data may not reflect recent server configuration changes"],"whenToPreferThis":"Use this endpoint when you need a quick, no-cost-to-scan TLS protocol and cipher suite assessment sourced from Qualys SSL Labs cached data. Ideal for auditing known, publicly-facing hosts that are likely already in the Qualys database. Prefer this over live scanning tools when you want fast results without triggering an active scan. Not suitable for hosts never previously scanned or for obtaining a fresh, real-time assessment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:45:21.115Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-tls-cipher-enumeration-d7e1cbda"}