# ChainVerdict TLS Certificate Probe

> ChainVerdict TLS Certificate Probe is a paid API for AI agents from chainverdict.xyz, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Performs a live TLS probe on a hostname and returns certificate validity, expiry, issuer, chain completeness, protocol version, and cipher suite in real time.

## Facts

- Endpoint: GET https://chainverdict.xyz/v1/security/tls/:domain
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/chainverdict-tls-certificate-probe-ee490365
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_i1HJkk1aST4F0rQ2AoxVQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability chainverdict-tls-certificate-probe-ee490365
```

Example prompt: Before we send any payment data, can you do a live TLS probe on api.payments-provider.com and confirm it has a valid certificate, check who issued it, when it expires, and whether the full chain is complete?

## When to prefer this

Use this endpoint when an AI agent needs to confirm in real time that a target hostname is serving a legitimate, unexpired TLS certificate before transmitting sensitive data, making a payment, or establishing a trusted connection. Prefer this over static certificate records or passive monitoring tools when you need a live probe at the moment of action — especially before agent-to-agent or agent-to-API calls involving financial transactions or PII.

## Known failure modes

- Domain does not exist or is unreachable — connection timeout or DNS failure
- Hostname refuses TLS connections on port 443 — connection refused error
- Self-signed or untrusted certificate — returns invalid chain status
- Certificate already expired — returns validity=false with past expiry date
- Rate limiting or payment failure — 402 or 429 response

## How this service works

Live TLS probe of a hostname: certificate validity and expiry, issuer, chain completeness, protocol and cipher. Confirms an endpoint you are about to send data to is actually serving a valid certificate right now.

## Output

Returns live TLS probe results for the specified hostname including: whether the certificate is currently valid, the exact expiry date and time, the certificate issuer identity, whether the certificate chain is complete (no missing intermediates), the TLS protocol version in use (e.g. TLS 1.2 vs 1.3), and the negotiated cipher suite.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "pathParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Hostname to probe over TLS"
      }
     }
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "additionalProperties": true
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/chainverdict-tls-certificate-probe-ee490365/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from chainverdict.xyz](https://www.zero.xyz/host/chainverdict.xyz/llms.txt)