# agent402.tools SSL Audit

> agent402.tools SSL Audit is a paid API for AI agents from agent402.tools, paid per call via x402, $0.006/call, status unknown (last checked 2026-09-14).

Runs a bundled TLS/SSL security audit on a domain: live certificate inspection, HTTP security headers check, and CAA DNS records lookup in one payment.

## Facts

- Endpoint: POST https://agent402.tools/api/skill/ssl-audit
- Price: $0.006/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-tools-ssl-audit-2484987b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-ghkw_2MalUv3wgvMz2k-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-tools-ssl-audit-2484987b -d '<json body>'
```

Example prompt: Can you run a full SSL audit on stripe.com — check its TLS certificate, HTTP security headers, and CAA DNS records?

## When to prefer this

Choose this endpoint when you need a comprehensive SSL/TLS security posture check in a single call rather than running separate certificate, headers, and DNS tools individually. It bundles three distinct checks (TLS cert, HTTP headers, CAA DNS) for one flat fee, making it ideal for automated security audits, compliance checks, or pre-deployment verification.

## Known failure modes

- Domain does not exist or is unreachable — partial results returned for available checks
- Invalid domain format — request rejected with validation error
- One or more underlying tools (tls-cert, http-headers, dns-lookup) fail — partial success returned with available data
- Network timeout on live certificate inspection — may return incomplete results

## How this service works

Bundled execution of the SSL audit workflow - TLS/SSL security posture check: live certificate inspection, HTTP security headers, and CAA DNS records. One x402 payment runs 3 underlying tools (tls-cert, http-headers, dns-lookup); partial-success per step.

## Output

A combined report covering: live TLS certificate details (issuer, expiry, chain), HTTP security response headers (HSTS, CSP, X-Frame-Options, etc.), and CAA DNS records showing which certificate authorities are authorized to issue certs for the domain. Partial results are returned on partial success.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain to audit (e.g. stripe.com)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "args": {
   "domain": "stripe.com"
  },
  "pack": "ssl-audit",
  "steps": [
   {
    "ok": true,
    "slug": "tls-cert",
    "result": {}
   },
   {
    "ok": true,
    "slug": "http-headers",
    "result": {}
   },
   {
    "ok": true,
    "slug": "dns-lookup",
    "result": {}
   }
  ],
  "summary": "3/3 steps succeeded"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-tools-ssl-audit-2484987b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)