# SiteCheck Web Intel TLS/Cipher Enumeration

> SiteCheck Web Intel TLS/Cipher Enumeration is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Returns TLS protocol support and cipher-suite strength for a hostname using cached Qualys SSL Labs data, flagging deprecated protocols and weak ciphers.

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/tls-cipher-enum?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-tls-cipher-enumeration-d7e1cbda
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gdiY1PYxPyb7LNEgaRTWJ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-tls-cipher-enumeration-d7e1cbda
```

Example prompt: Can you check what TLS versions and cipher suites github.com accepts, and flag any deprecated protocols like SSL 3 or TLS 1.0 and any weak ciphers like RC4 or 3DES?

## When to prefer this

Use this endpoint when you need a quick, no-cost-to-scan TLS protocol and cipher suite assessment sourced from Qualys SSL Labs cached data. Ideal for auditing known, publicly-facing hosts that are likely already in the Qualys database. Prefer this over live scanning tools when you want fast results without triggering an active scan. Not suitable for hosts never previously scanned or for obtaining a fresh, real-time assessment.

## Known failure modes

- Host has never been scanned by Qualys SSL Labs — returns a retry/not-found error with no data
- Invalid or non-resolvable hostname returns an error
- Missing required 'host' query parameter causes a validation error
- Stale cached data may not reflect recent server configuration changes

## How this service works

TLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Reads existing reports only; a host that was never scanned returns a retry error.

## Output

Returns the set of TLS protocol versions the host accepts (with SSL 3, TLS 1.0, and TLS 1.1 flagged as deprecated), cipher suite counts per protocol, identification of weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Data is sourced from a cached Qualys SSL Labs report; if the host has never been scanned, a retry error is returned.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "host"
     ],
     "properties": {
      "host": {
       "type": "string",
       "description": "Host name such as wikipedia.org (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-tls-cipher-enumeration-d7e1cbda/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)