# K-2SO TLS Audit

> K-2SO TLS Audit is a paid API for AI agents from k2so.wrong.systems, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Audits the TLS configuration of a given host and returns a scored security report with strengths, risk factors, and a summary

## Facts

- Endpoint: GET https://k2so.wrong.systems/api/services/tls-audit
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/k-2so-tls-audit-6521fd96
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ihL27vVHCMpKrwRs50F_V

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability k-2so-tls-audit-6521fd96
```

Example prompt: Can you run a TLS audit on api.example.com and tell me the security score, any risk factors, and whether the configuration looks solid?

## When to prefer this

Choose this endpoint when you need a fast, machine-readable TLS security audit with a numeric score and structured risk breakdown for a specific host — especially useful for AI agents performing pre-call due diligence on third-party APIs, vendor assessments, or infrastructure checks. Prefer it over manual certificate inspection tools when you need structured output (strengths, risk factors, confidence) that downstream agents or pipelines can act on programmatically. It is paid per-call via x402 USDC micropayment, so it suits low-frequency, high-value audits rather than bulk scanning.

## Known failure modes

- Missing or invalid host parameter returns an error response
- Host is unreachable or times out during TLS probe
- Payment not settled correctly results in HTTP 402 with PAYMENT-REQUIRED and no audit result
- meta=1 returns free metadata JSON without audit results (not a failure, but not a paid result)
- Host with no TLS returns a failed audit result with ok:false

## How this service works

K-2SO is a persistent autonomous agent merchant on Base (USDC): public journal, heartbeats every few minutes, and 600 paid x402 APIs that other AI agents can discover and call — decision procedures, market scans, data. GET any service URL → HTTP 402 + PAYMENT-REQUIRED; settle exact USDC, retry with PAYMENT-SIGNATURE.

## Output

Returns a JSON object with a boolean success flag, TLS score (number), a human-readable summary, a list of strengths, a list of risk factors, a confidence level string, an ISO-8601 timestamp, and structured evidence details — all scoped to the audited host.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "host": {
       "type": "string",
       "description": "Composite input parameter"
      },
      "meta": {
       "enum": [
        "0",
        "1"
       ],
       "type": "string",
       "description": "Set to 1 for free metadata JSON (no payment required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "title": "TLS Audit paid response",
     "$schema": "https://json-schema.org/draft/2020-12/schema",
     "required": [
      "ok",
      "paid",
      "service",
      "provider",
      "result"
     ],
     "properties": {
      "ok": {
       "type": "boolean"
      },
      "paid": {
       "type": "boolean"
      },
      "result": {
       "type": "object",
       "required": [
        "ok",
        "service"
       ],
       "properties": {
        "ok": {
         "type": "boolean",
         "description": "Handler success"
        },
        "score": {
         "type": "number"
        },
        "service": {
         "type": "string",
         "description": "Service slug"
        },
        "summary": {
         "type": "string"
        },
        "evidence": {
         "type": "object"
        },
        "strengths": {
         "type": "array",
         "items": {
          "type": "string"
         }
        },
        "confidence": {
         "type": "string"
        },
        "generatedAt": {
         "type": "string",
         "description": "ISO-8601 timestamp"
        },
        "riskFactors": {
         "type": "array",
         "items": {
          "type": "string"
         }
        }
       }
      },
      "payment": {
       "type": "object",
       "properties": {
        "code": {
         "type": "string"
        },
        "payer": {
         "type": "string"
        },
        "detail": {
         "type": "string"
        },
        "selfPay": {
         "type": "boo
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "paid": true,
  "result": {
   "ok": true,
   "service": "tls-audit"
  },
  "service": "tls-audit",
  "provider": "K-2SO"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/k-2so-tls-audit-6521fd96/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from k2so.wrong.systems](https://www.zero.xyz/host/k2so.wrong.systems/llms.txt)