# Macaroon Network Domain SSL Check

> Macaroon Network Domain SSL Check is a paid API for AI agents from api.macaroonnetwork.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Performs a live TLS handshake against a domain's HTTPS port to verify certificate validity, issuer, subject, and expiry window in real time.

## Facts

- Endpoint: POST https://api.macaroonnetwork.com/execute/domain-ssl-check-v1
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/macaroon-network-domain-ssl-check-86512063
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_D0U8JzXWilsnSYAxVi9yp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability macaroon-network-domain-ssl-check-86512063 -d '<json body>'
```

Example prompt: Before my agent contacts checkout.acmeshop.com, can you do a live TLS handshake check to confirm it has a valid SSL certificate, who issued it, and how many days until it expires?

## When to prefer this

Choose this endpoint when you need a real-time, live TLS handshake result rather than cached or third-party certificate-transparency data. It is ideal for pre-interaction trust checks on merchants, partners, or any web service where certificate freshness and authenticity matter. Prefer it over passive CT log lookups when you need to confirm the certificate is actively being served right now.

## Known failure modes

- Domain does not resolve or is unreachable — connection error returned
- Domain has an expired certificate — validity flag set to false with expiry date
- Domain has a self-signed or untrusted certificate — issuer flagged accordingly
- Port 443 is closed or filtered — TLS handshake fails with timeout or connection refused
- Invalid domain input format — request rejected with validation error

## How this service works

Part of the Domain Web Trust family: live TLS handshake against a domain's HTTPS port, useful for confirming a domain has a valid, current certificate before an agent interacts with a website or merchant. Reports certificate validity, issuer/subject, and validity window (including days until expiry). Performed via a real TLS connection at request time -- no third-party certificate-transparency dataset or resale-terms question.

## Output

Returns the result of a live TLS handshake including: whether the certificate is currently valid, the certificate issuer and subject, the validity window (not-before and not-after dates), and the number of days remaining until expiry.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/macaroon-network-domain-ssl-check-86512063/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.macaroonnetwork.com](https://www.zero.xyz/host/api.macaroonnetwork.com/llms.txt)