# SiteSignal TLS Security Evidence

> SiteSignal TLS Security Evidence is a paid API for AI agents from trinity-throw-thursday-gravity.trycloudflare.com, paid per call via x402, $0.03/call, status down (last checked 2026-09-15).

Inspects a public HTTPS hostname's TLS certificate details and observable HTTP response security headers without active scanning.

## Facts

- Endpoint: GET https://trinity-throw-thursday-gravity.trycloudflare.com/x402/tls-security
- Price: $0.03/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitesignal-tls-security-evidence-3469c6f6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9H8BPZUmCBnD6Q0KZ54cr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitesignal-tls-security-evidence-3469c6f6
```

Example prompt: Can you check the TLS certificate and security headers for stripe.com — I want to see the certificate issuer, expiry, and what security headers they return?

## When to prefer this

Choose this endpoint when you need a quick, passive, non-intrusive snapshot of a public domain's TLS certificate and security headers — ideal for due diligence checks, pre-launch audits, or vendor assessments where you don't want to trigger active scanning alerts. Prefer this over full vulnerability scanners when you only need certificate and header evidence without port scanning or exploit probing.

## Known failure modes

- Domain is not publicly reachable or does not serve HTTPS — returns an error or empty result
- Invalid or non-existent hostname provided — returns a resolution or connection error
- Domain has an expired or self-signed certificate that cannot be inspected normally
- Rate limiting or timeout when the target host responds slowly
- Cloudflare tunnel availability issues causing endpoint downtime

## How this service works

Inspect a public HTTPS hostname's TLS certificate and observable response security headers without active scanning.

## Output

Returns the inspected TLS certificate metadata (issuer, subject, validity dates, SANs, cipher suite) and observable HTTP response security headers (e.g. HSTS, CSP, X-Frame-Options, X-Content-Type-Options) for the specified public HTTPS hostname, gathered passively without active scanning.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Public HTTPS hostname."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitesignal-tls-security-evidence-3469c6f6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from trinity-throw-thursday-gravity.trycloudflare.com](https://www.zero.xyz/host/trinity-throw-thursday-gravity.trycloudflare.com/llms.txt)