# SafeStream API - Domains-Only SSL Certificate Stream (Hourly)

> SafeStream API - Domains-Only SSL Certificate Stream (Hourly) is a paid API for AI agents from api.thesafestream.com, paid per call via x402, $0.28/call, status down (last checked 2026-09-15).

Authenticates and provides a timed WebSocket access token for a real-time, hourly domains-only SSL certificate intelligence stream.

## Facts

- Endpoint: POST https://api.thesafestream.com/paid/auth/domains-only
- Price: $0.28/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/safestream-hourly-domains-only-ssl-stream-7486ff4d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_b9ETQFVrTs4WBPlPuoJwT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability safestream-hourly-domains-only-ssl-stream-7486ff4d -d '<json body>'
```

Example prompt: Get me a 1-hour access token to SafeStream's domains-only SSL certificate stream — use my email user@example.com so I can connect to the WebSocket feed and monitor newly issued domain names in real time.

## When to prefer this

Choose this endpoint when you need a high-throughput, lightweight stream of domain names only from SSL certificates — without the overhead of full certificate data or DER encoding. Ideal for threat intelligence pipelines, phishing detection, domain brand monitoring, or any use case where certificate metadata is unnecessary and raw domain throughput is paramount. Use the hourly tier (vs daily) when you need a short-lived, on-demand session rather than a persistent 24-hour subscription.

## Known failure modes

- Payment failure — success: false returned if x402 micropayment is not completed
- Invalid email format — request rejected with validation error
- Invalid product identifier — must be exactly 'domains-only'
- Duration out of range — unsupported duration_hours value rejected
- Token already expired — expiresIn becomes 0 if connection is delayed
- WebSocket connection refused — token used after expiration window

## How this service works

Hourly access to domains-only stream. Lightweight stream with domain names only for maximum throughput. Full documentation: https://www.thesafestream.com

## Output

Returns a WebSocket access token (hex string), the WebSocket URL to connect to the domains-only stream, the token expiration ISO 8601 timestamp, time-to-expiry in milliseconds, and a success boolean. The agent can then open a WebSocket connection to the provided URL to receive a real-time stream of domain names from newly issued SSL certificates.

## Example request

```json
{
 "email": "zero-qa@agentmail.to",
 "product": "domains-only",
 "duration_hours": 1
}
```

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "properties": {
    "body": {
     "type": "object",
     "properties": {}
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "token": {
     "type": "string"
    },
    "success": {
     "type": "boolean"
    },
    "expiresAt": {
     "type": "string",
     "format": "date-time"
    },
    "expiresIn": {
     "type": "number"
    },
    "websocketUrl": {
     "type": "string"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "token": {
  "type": "string",
  "description": "Access token for WebSocket connection"
 },
 "success": {
  "type": "boolean",
  "description": "Whether payment was successful"
 },
 "expiresAt": {
  "type": "string",
  "description": "Token expiration timestamp (ISO 8601)"
 },
 "expiresIn": {
  "type": "number",
  "description": "Milliseconds until token expiration"
 },
 "websocketUrl": {
  "type": "string",
  "description": "WebSocket URL: wss://api.thesafestream.com/paid/domains-only?token=xxx"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/safestream-hourly-domains-only-ssl-stream-7486ff4d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.thesafestream.com](https://www.zero.xyz/host/api.thesafestream.com/llms.txt)