# SiteCheck Web Intel SSL Certificate Chain Audit

> SiteCheck Web Intel SSL Certificate Chain Audit is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-25).

Retrieves a cached SSL Labs report for a host including TLS grade, certificate chain details, cipher strengths, vulnerability flags (Heartbleed/POODLE/BEAST), and HSTS status

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/ssl-cert-chain?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-25
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-ssl-certificate-chain-audit-8548db8d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BJ21i6-Jii5ojtZplq_zq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-ssl-certificate-chain-audit-8548db8d
```

Example prompt: Can you pull the SSL Labs security report for github.com and tell me the grade, whether it has any weak ciphers, and if it's vulnerable to Heartbleed or POODLE?

## When to prefer this

Use this endpoint when you need a quick, structured TLS/SSL security audit for a known public hostname without waiting for a live scan. Ideal for security posture checks, vendor assessments, and compliance pipelines where Qualys SSL Labs coverage is likely (major sites, well-known domains). Prefer this over initiating a new SSL Labs scan when latency matters and the host is likely already cached. Not suitable for brand-new or obscure hosts that SSL Labs may never have scanned.

## Known failure modes

- Host never scanned by SSL Labs — returns retry error instead of results
- Invalid or unresolvable hostname — request rejected
- Host does not have port 443 open — no SSL data available
- SSL Labs cache may be stale for recently updated certificate configurations
- Rate limiting from underlying SSL Labs API may cause transient errors

## How this service works

HTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartbleed/POODLE/BEAST flags and HSTS. Only reads reports SSL Labs already has, so a host that was never scanned returns a retry error instead of a new scan.

## Output

Returns the cached Qualys SSL Labs report for the specified host including: overall TLS/SSL grade (A through F), number of certificates in the chain, trust store validation status, supported TLS versions, count of weak ciphers, boolean flags for Heartbleed, POODLE, and BEAST vulnerabilities, and HSTS presence. If the host has never been scanned by SSL Labs, returns a retry error rather than initiating a new scan.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "host"
     ],
     "properties": {
      "host": {
       "type": "string",
       "description": "Host name such as wikipedia.org (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-ssl-certificate-chain-audit-8548db8d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)