{"uid":"cap_iwQxZYa9FXDBwVhj0jBZ5","slug":"sec-intel-agentdiet-dev-domain-osint-tls-certificate-security-headers-efd625c7","name":"Domain OSINT, TLS Certificate & Security Headers Recon","description":"Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/dns-whois-tls-recon)","url":"https://sec-intel.agentdiet.dev/v1/dns-whois-tls-recon?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","minLength":1,"description":"Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_eM8uJr0_ZwdJX1EWH7DgC","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Performs live reconnaissance on a domain, returning IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry details, and HTTP security header grades","exampleAgentPrompt":"Can you run a full DNS, TLS certificate, and security header recon on anthropic.com — I want to see what IPs it resolves to, who issued the certificate and when it expires, and how its HTTP security headers are graded?","exampleUseCases":[{"title":"Vendor security due diligence check","prompt":"Before we onboard this new SaaS vendor, can you check the DNS resolution, TLS certificate issuer and expiry, and HTTP security header grade for their domain stripe.com?"},{"title":"SSL expiry monitoring alert","prompt":"Can you pull the TLS certificate details for our domain example.com so I can see exactly when it expires and who the issuer is — I want to make sure we're not about to go down?"},{"title":"Competitive security posture benchmarking","prompt":"I want to compare how well openai.com is configured security-wise — can you fetch its DNS records, TLS cert info, and HTTP security headers grade?"}],"resultDescription":"Returns a structured object containing live IPv4 and IPv6 addresses the domain resolves to, TLS certificate metadata (issuer, subject, expiry date, validity period), and an HTTP security header assessment including the presence and grade of headers such as HSTS, CSP, X-Frame-Options, and similar security controls.","failureModes":["Domain does not exist or fails DNS resolution — returns error or empty DNS records","Domain has no HTTPS/TLS configured — TLS fields will be absent or null","Domain actively blocks external probes — may return incomplete or timeout results","Invalid domain format supplied — returns validation error","Transient network errors reaching the target domain — intermittent failures possible"],"whenToPreferThis":"Choose this endpoint when you need live, real-time reconnaissance on a specific domain's DNS resolution, TLS certificate status, and HTTP security posture in a single call — ideal for security audits, vendor assessments, certificate expiry monitoring, or competitive OSINT. Prefer this over generic WHOIS-only tools when you need TLS and security header data in addition to DNS, and over full vulnerability scanners when you want lightweight, fast recon without active exploitation testing.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:15.001Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-domain-osint-tls-certificate-security-headers-fe8d3f6c"}