{"uid":"cap_iFa8rW16nGG30bheMSPP2","slug":"preflight-agentdiet-dev-domain-osint-tls-certificate-security-headers-acc42160","name":"Domain OSINT, TLS Certificate & Security Headers Recon","description":"Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/dns-whois-tls-recon)","url":"https://preflight.agentdiet.dev/v1/dns-whois-tls-recon?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","minLength":1,"description":"Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_A8ELfdrPi_NkNzRfq1aGI","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Performs live DNS resolution (IPv4/IPv6), TLS certificate inspection (issuer, expiry), and HTTP security header analysis for a given domain.","exampleAgentPrompt":"Can you run a full DNS, TLS certificate, and HTTP security header recon on anthropic.com — I want to see the resolved IPs, who issued their cert and when it expires, and what their security grade looks like?","exampleUseCases":[{"title":"Pre-vendor security due diligence","prompt":"Before we sign a contract with this SaaS vendor, can you check their domain securevendor.io — I want to see their DNS setup, TLS cert issuer and expiry, and whether their HTTP security headers are up to scratch?"},{"title":"Monitoring competitor SSL expiry","prompt":"Can you check openai.com's TLS certificate details — specifically when it expires and who issued it — so I can track whether they let it lapse?"},{"title":"Incident response domain investigation","prompt":"We're seeing suspicious traffic from suspicious-site.net — can you pull the live DNS resolution, TLS cert info, and HTTP security grade so I can assess their infrastructure?"}],"resultDescription":"Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate metadata (issuer, expiry date, validity status), and an HTTP security grade based on observed security headers (e.g. HSTS, CSP, X-Frame-Options). Useful for rapid infrastructure recon and security posture assessment.","failureModes":["Domain does not exist or fails DNS resolution — no records returned","Domain has no HTTPS/TLS — certificate fields absent or error","Firewall or rate-limiting blocks probe — partial or empty results","Invalid domain format provided — validation error","Target server unreachable or times out — timeout error"],"whenToPreferThis":"Choose this endpoint when you need a combined, live snapshot of a domain's DNS records, TLS certificate health, and HTTP security header posture in a single call. Ideal for OSINT workflows, vendor risk assessments, incident response triage, and compliance checks where manual inspection would be slow. Prefer this over separate DNS-only or TLS-only tools when you want a unified security summary without stitching together multiple API calls.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:20.409Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-domain-osint-tls-certificate-security-headers-fa82a7d0"}