{"uid":"cap_lbUm2HpXhyS9x_7QEjzB5","slug":"onchain-risk-agentdiet-dev-domain-osint-tls-certificate-security-ab47b8d1","name":"Domain OSINT, TLS Certificate & Security Headers Recon","description":"Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/osint)","url":"https://onchain-risk.agentdiet.dev/v1/osint?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","minLength":1,"description":"Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_TAp0RVUbpfm9fdXzazP4z","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Performs live DNS resolution (IPv4/IPv6), TLS certificate inspection (issuer, expiry), and HTTP security header grading for a given domain.","exampleAgentPrompt":"Can you run a full DNS, TLS certificate, and HTTP security header recon on anthropic.com — I want to know the IP addresses, who issued the cert and when it expires, and the security header grade?","exampleUseCases":[{"title":"Vendor security due diligence check","prompt":"Before we integrate with this new vendor, can you check the TLS certificate details, DNS resolution, and HTTP security headers for their domain stripe.com so I can assess their basic security posture?"},{"title":"SSL expiry monitoring for owned domains","prompt":"Can you inspect the TLS certificate for mycompany.com and tell me when it expires and who issued it? I want to make sure we're not about to let it lapse."},{"title":"Phishing domain investigation","prompt":"I received a suspicious email from someone claiming to be from paypa1.com — can you do a DNS and TLS certificate recon on that domain so I can see if it's a legit site or a phishing setup?"}],"resultDescription":"Returns live DNS resolution data (IPv4 and IPv6 addresses), TLS certificate metadata (issuer, expiry date, validity status), and an HTTP security header grade/breakdown indicating which security headers (e.g. HSTS, CSP, X-Frame-Options) are present or missing for the target domain.","failureModes":["Domain does not exist or fails DNS resolution — returns empty or error DNS result","Domain's server is unreachable or times out during TLS/header inspection","Invalid or malformed domain name input — validation error returned","Domain has no TLS certificate (HTTP-only) — TLS fields may be null or absent","Rate limiting or payment failure (HTTP 402) if credit is exhausted"],"whenToPreferThis":"Choose this endpoint when you need a combined, single-call recon on DNS, TLS, and HTTP security headers for a domain without stitching together multiple separate tools. It is ideal for security due diligence, vendor assessments, phishing investigations, certificate expiry checks, or any workflow that needs a quick infrastructure fingerprint of a domain. Prefer this over generic whois or passive DNS tools when live, real-time resolution and certificate inspection are required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:33.179Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-domain-osint-tls-certificate-security-ab47b8d1"}