# Tokenguard SSL/TLS Certificate Lookup

> Tokenguard SSL/TLS Certificate Lookup is a paid API for AI agents from eltociear-tokenguard.hf.space, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Returns SSL/TLS certificate history and subdomain enumeration data for a given domain name

## Facts

- Endpoint: POST https://eltociear-tokenguard.hf.space/data/certs
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tokenguard-ssl-tls-certificate-lookup-1df3997e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6DgxTEvphk4Z_58wTwOha

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tokenguard-ssl-tls-certificate-lookup-1df3997e -d '<json body>'
```

Example prompt: Look up SSL certificate data and enumerate all subdomains for example.com using certificate transparency records.

## When to prefer this

Use this endpoint when you need to perform subdomain enumeration or certificate transparency lookups for a specific domain as part of OSINT, security research, or attack surface mapping. Prefer this over general WHOIS lookups when your goal is specifically to discover subdomains and certificate issuance history rather than registrar or ownership information.

## Known failure modes

- Domain not found in certificate transparency logs — returns empty arrays
- Invalid domain format — returns 400 error
- Payment failure via x402 micropayment — request not processed
- Upstream certificate data source unavailable — 503 or timeout
- Rate limiting on repeated rapid calls to the same domain

## How this service works

Certificate-transparency history for a domain (crt.sh) — every TLS certificate issued, which doubles as subdomain discovery

## Output

A JSON object containing the queried domain, a list of discovered subdomains, the total number of SSL/TLS certificates found, and the count of unique subdomains discovered via certificate transparency logs.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Bare domain, e.g. example.com"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "domain": "example.com",
  "subdomains": [
   "www.example.com"
  ],
  "certificates": 34,
  "subdomain_count": 12
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tokenguard-ssl-tls-certificate-lookup-1df3997e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from eltociear-tokenguard.hf.space](https://www.zero.xyz/host/eltociear-tokenguard.hf.space/llms.txt)