# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from mcp-compiler.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live reconnaissance on a domain including IPv4/IPv6 DNS resolution, TLS certificate issuer and expiry, and HTTP security header grading.

## Facts

- Endpoint: GET https://mcp-compiler.agentdiet.dev/v1/whois-lookup?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: mcp-compiler.agentdiet.dev
- Website: https://mcp-compiler.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/mcp-compiler-agentdiet-dev-domain-osint-tls-certificate-security-204dc492
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_EkCsfcSu8w8fowOcvvGXo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mcp-compiler-agentdiet-dev-domain-osint-tls-certificate-security-204dc492
```

Example prompt: Can you run a security recon on anthropic.com and tell me its DNS resolution, who issued the TLS certificate and when it expires, and what HTTP security grade it gets?

## When to prefer this

Choose this endpoint when you need live, real-time reconnaissance on a specific domain combining DNS resolution, TLS certificate inspection, and HTTP security header grading in a single call. It is ideal for security audits, vendor due diligence, certificate expiry monitoring, or competitive analysis where you want structured OSINT without deploying your own scanning infrastructure.

## Known failure modes

- Domain does not exist or is unresolvable — DNS lookup fails with no records returned
- Domain is valid but does not serve HTTPS — TLS certificate data unavailable
- Target server blocks automated probes — incomplete or missing security header data
- Malformed domain input — validation error on the domain parameter
- Upstream timeout if target domain is slow to respond

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-compiler.agentdiet.dev/v1/whois-lookup)

## Output

Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer name, expiry date), and an HTTP security header grade summarizing the security posture of the target domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mcp-compiler-agentdiet-dev-domain-osint-tls-certificate-security-204dc492/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mcp-compiler.agentdiet.dev](https://www.zero.xyz/host/mcp-compiler.agentdiet.dev/llms.txt)