# SafeStream API - Daily Domains-Only SSL Stream

> SafeStream API - Daily Domains-Only SSL Stream is a paid API for AI agents from api.thesafestream.com, paid per call via x402, $6.67/call, status down (last checked 2026-09-15).

Authenticates and provides daily access to a lightweight real-time stream of domain names extracted from SSL certificates, returning a WebSocket connection token.

## Facts

- Endpoint: POST https://api.thesafestream.com/paid/auth/domains-only-daily
- Price: $6.67/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/safestream-api-domains-only-daily-stream-a46490d7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__Oi3viT5eHip3s4DL28_b

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability safestream-api-domains-only-daily-stream-a46490d7 -d '<json body>'
```

Example prompt: Give me daily access to SafeStream's domains-only SSL certificate stream so I can monitor newly seen domain names in real time — just the lightweight domain feed, not full certificates.

## When to prefer this

Choose this endpoint when you need daily (vs. hourly) access to SSL certificate domain intelligence and only require domain names rather than full certificate data, minimizing bandwidth and cost. Prefer this over the hourly or full-certificate variants when cost efficiency and throughput matter more than recency or certificate details. Ideal for threat intelligence pipelines, domain watchlists, phishing detection, or brand monitoring at scale.

## Known failure modes

- Payment failure — success: false returned if x402 payment is not completed or insufficient
- Expired token — the expiresAt/expiresIn fields indicate a limited validity window; reconnection requires a new payment
- Invalid or malformed request body — may result in 4xx HTTP error
- WebSocket connection failure if token is not used before expiration
- Service unavailability — stream may be temporarily offline

## How this service works

Daily access to domains-only stream. Lightweight stream with domain names only for maximum throughput. Full documentation: https://www.thesafestream.com

## Output

Returns a WebSocket access token, the WebSocket URL (wss://api.thesafestream.com/paid/domains-only?token=xxx) to connect to, a success boolean, and token expiration info (ISO 8601 timestamp and milliseconds until expiry). The agent can then connect to the WebSocket URL to receive a continuous stream of domain names extracted from newly issued SSL certificates.

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "properties": {
    "body": {
     "type": "object",
     "properties": {}
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "token": {
     "type": "string"
    },
    "success": {
     "type": "boolean"
    },
    "expiresAt": {
     "type": "string",
     "format": "date-time"
    },
    "expiresIn": {
     "type": "number"
    },
    "websocketUrl": {
     "type": "string"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "token": {
  "type": "string",
  "description": "Access token for WebSocket connection"
 },
 "success": {
  "type": "boolean",
  "description": "Whether payment was successful"
 },
 "expiresAt": {
  "type": "string",
  "description": "Token expiration timestamp (ISO 8601)"
 },
 "expiresIn": {
  "type": "number",
  "description": "Milliseconds until token expiration"
 },
 "websocketUrl": {
  "type": "string",
  "description": "WebSocket URL: wss://api.thesafestream.com/paid/domains-only?token=xxx"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/safestream-api-domains-only-daily-stream-a46490d7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.thesafestream.com](https://www.zero.xyz/host/api.thesafestream.com/llms.txt)