# NetIntel SSL Analyzer

> NetIntel SSL Analyzer is a paid API for AI agents from netintel.dev, paid per call via x402, $0.007/call, status unknown (last checked 2026-10-11).

Analyzes the SSL/TLS configuration of a domain, returning certificate details, cipher suites, protocol versions, chain validity, and a security grade.

## Facts

- Endpoint: GET https://netintel.dev/ssl/analyze?utm_source=zero.xyz
- Price: $0.007/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netintel-ssl-analyzer-f9ce931e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_cMAXG3kfv6q7m79EcnOLL

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netintel-ssl-analyzer-f9ce931e
```

Example prompt: Can you check the SSL/TLS setup for example.com — I want to see the security grade, which TLS versions are supported, the certificate chain, and any warnings?

## When to prefer this

Use this endpoint when you need a detailed, programmatic SSL/TLS audit of a specific domain — including certificate metadata, chain validation, supported protocol versions, and cipher grading — rather than just a simple certificate expiry check or a human-readable SSL report from a browser.

## Known failure modes

- Domain does not exist or is unreachable — connection error or timeout
- Port not open or no TLS listener on the specified port — connection refused
- Invalid domain format in query parameter — 400 bad request
- Payment not provided or insufficient — 402 payment required
- Self-signed or misconfigured certificate may cause chain_valid: false with warnings populated

## How this service works

Performs a TLS handshake to inspect the certificate chain, probes supported TLS versions (1.0–1.3), detects weak keys and expiry issues, and returns an overall security grade (A/B/C/F). For just the cert facts fast, see the cheaper /ssl/cert (quick tier).

## Output

Returns a JSON object with the domain host, port, an overall SSL security grade (e.g. 'A'), the connection details (cipher suite, protocol, supported protocols), the leaf certificate (subject, issuer, SANs, validity dates, key algorithm and size, serial number, signature algorithm), the certificate chain (intermediate/root CAs with validity dates), a boolean chain_valid flag, and an array of any SSL warnings.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "port": {
       "type": "number",
       "description": "Port to connect to (default: 443)"
      },
      "domain": {
       "type": "string",
       "description": "Domain to analyze (e.g. example.com)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "host": {
       "type": "string"
      },
      "port": {
       "type": "number"
      },
      "chain": {
       "type": "array"
      },
      "grade": {
       "type": "string"
      },
      "warnings": {
       "type": "array"
      },
      "connection": {
       "type": "object"
      },
      "certificate": {
       "type": "object"
      },
      "chain_valid": {
       "type": "boolean"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "host": "example.com",
  "port": 443,
  "chain": [
   {
    "issuer": "DigiCert Global Root CA",
    "subject": "DigiCert TLS RSA SHA256 2020 CA1",
    "not_after": "Apr 13 23:59:59 2031 GMT",
    "not_before": "Apr 14 00:00:00 2021 GMT"
   }
  ],
  "grade": "A",
  "warnings": [],
  "connection": {
   "cipher": "TLS_AES_256_GCM_SHA384",
   "protocol": "TLSv1.3",
   "supported_protocols": [
    "TLS 1.2",
    "TLS 1.3"
   ]
  },
  "certificate": {
   "san": [
    "example.com",
    "www.example.com"
   ],
   "issuer": {
    "country": "US",
    "common_name": "DigiCert TLS RSA SHA256 2020 CA1",
    "organization": "DigiCert Inc"
   },
   "subject": {
    "country": "US",
    "common_name": "example.com",
    "organization": "Internet Corporation for Assigned Names and Numbers",
    "organizational_unit": null
   },
   "version": 3,
   "key_info": {
    "size": 2048,
    "algorithm": "RSA"
   },
   "not_after": "Feb 13 23:59:59 2025 GMT",
   "not_before": "Jan 13 00:00:00 2024 GMT",
   "serial_number": "0FD078DD48F1A2BD4D0F2BA96B6038FE",
   "signature_algorithm": "sha256WithRSAEncryption"
  },
  "chain_valid": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netintel-ssl-analyzer-f9ce931e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from netintel.dev](https://www.zero.xyz/host/netintel.dev/llms.txt)