# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from token-intel.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live reconnaissance on a domain, returning IPv4/IPv6 DNS records, TLS certificate issuer and expiry details, and HTTP security header grade.

## Facts

- Endpoint: GET https://token-intel.agentdiet.dev/v1/dns-recon?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: token-intel.agentdiet.dev
- Website: https://token-intel.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/token-intel-agentdiet-dev-domain-osint-tls-certificate-security-c7b45091
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8RpJl9Kvs3RzqzH_K7WeK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability token-intel-agentdiet-dev-domain-osint-tls-certificate-security-c7b45091
```

Example prompt: Can you run a full DNS and TLS recon on anthropic.com — I want to see the IPv4/IPv6 addresses it resolves to, who issued its TLS certificate and when it expires, and how its HTTP security headers score?

## When to prefer this

Choose this endpoint when you need a fast, all-in-one passive recon snapshot of a domain's DNS, TLS, and HTTP security posture without setting up your own toolchain. Ideal for security due diligence, vendor assessments, certificate expiry monitoring, and OSINT investigations where you need structured output about live infrastructure state in a single API call.

## Known failure modes

- Domain does not exist or fails DNS resolution — empty or error response
- Domain has no TLS certificate — TLS fields may be null or absent
- Target host is unreachable or times out — timeout error returned
- Invalid or malformed domain input — validation error
- Domain resolves but returns no HTTP headers — security grade unavailable

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/dns-recon)

## Output

Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer CA, validity dates, expiry), and an HTTP security headers assessment including a security grade for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/token-intel-agentdiet-dev-domain-osint-tls-certificate-security-c7b45091/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from token-intel.agentdiet.dev](https://www.zero.xyz/host/token-intel.agentdiet.dev/llms.txt)