Back to Browse
Domain OSINT, TLS Certificate & Security Headers Recon
Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from mcp-security.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).
Performs live DNS resolution (IPv4/IPv6), TLS certificate inspection (issuer, expiry), and HTTP security header grading for a target domain.
Price / call$0.01
Success—
StatusUnknown
How this service works
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/osint)
Output
Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer, expiry date), and an HTTP security header grade for the queried domain, allowing agents to assess the domain's infrastructure and security posture.
Example use cases
Pre-launch security posture check
“Before we go live, can you check the TLS certificate, DNS resolution, and HTTP security headers for our domain mybusiness.com and tell me if anything looks risky?”
Vendor due diligence recon
“I'm evaluating a vendor at acmefinance.io — can you pull their DNS records, check who issued their SSL certificate and when it expires, and grade their security headers?”
Certificate expiry monitoring alert
“Can you check when the TLS certificate for payments.myplatform.com expires and who issued it? I want to make sure we're not about to go down due to an expired cert.”
Technical details
Endpoint
GEThttps://mcp-security.agentdiet.dev/v1/osint?utm_source=zero.xyzWhen to prefer
Choose this endpoint when you need a fast, combined OSINT snapshot of a domain's DNS resolution, TLS certificate validity, and HTTP security headers in a single call. It is ideal for security due diligence, pre-deployment checks, vendor recon, or certificate expiry monitoring. Prefer it over manual DNS/TLS tools when you need structured, agent-consumable output with a security grade already computed.
Side effects
- Domain does not exist or fails DNS resolution — returns error or empty DNS fields
- Domain has no HTTPS/TLS — certificate fields may be null or absent
- Payment not provided — HTTP 402 returned requiring x402 USDC payment
- Invalid domain string — validation error with bad input
- Timeout if target domain is unresponsive — partial or empty response
- Domain is IPv4-only or IPv6-only — one address family may be absent
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| domainrequired | string | Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT |
Output
Schema · Response
{
"type": "object"
}Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"