# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from github-audit.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live DNS resolution (IPv4/IPv6), TLS certificate inspection (issuer, expiry), and HTTP security header grading for a given domain

## Facts

- Endpoint: GET https://github-audit.agentdiet.dev/v1/dns-recon?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: github-audit.agentdiet.dev
- Website: https://github-audit.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/github-audit-agentdiet-dev-domain-osint-tls-certificate-security-0a3e6efc
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oGe8QF4VkcS7cEtjw7Jl6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability github-audit-agentdiet-dev-domain-osint-tls-certificate-security-0a3e6efc
```

Example prompt: Can you run a full DNS, TLS certificate, and security headers recon on openai.com — I want to see the IPv4/IPv6 addresses, who issued the SSL cert and when it expires, and what security grade the HTTP headers get?

## When to prefer this

Use this endpoint when you need a quick, all-in-one OSINT snapshot of a domain's live DNS resolution, TLS certificate health, and HTTP security posture without running separate tools. It is ideal for security due diligence, vendor assessments, competitive intelligence, or monitoring your own infrastructure's certificate expiry and header configuration.

## Known failure modes

- Domain does not exist or fails DNS resolution — returns error or empty DNS records
- Domain has no TLS certificate (HTTP only) — TLS fields may be null or absent
- Target domain blocks probes or returns connection timeouts — partial results or timeout error
- Malformed domain input — validation error indicating invalid domain format
- Transient network error reaching the target — may return incomplete data

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/dns-recon)

## Output

Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer, expiry date, validity), and an HTTP security header grade or analysis for the target domain, enabling a complete security and infrastructure snapshot.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/github-audit-agentdiet-dev-domain-osint-tls-certificate-security-0a3e6efc/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from github-audit.agentdiet.dev](https://www.zero.xyz/host/github-audit.agentdiet.dev/llms.txt)