SSL/TLS Certificate Check (by Domain)

omnial/x402-ssl-check

Given a domain name, returns its live SSL/TLS certificate details: whether it is currently valid, the issuer and subject, every alternate domain the certificate covers, its validity window and days until expiry, the negotiated TLS protocol and cipher, and identifying fingerprints.

activeper callv4

Price

Up to $0.0487 per call; you pay what the call used

You pay the price shown. If a call turns out to cost more than its quote, you pay the actual price, capped at twice the quote. No monthly minimum. Top-ups start at $5.00.

Data source

The requested web page

Data from the web page you request.

Use it

Your AI assistant does the work: it finds this tool, shows you the price first, runs it, and you are charged when the run finishes. There is nothing to set up for this tool in particular.

Connect once and your AI can find and run this tool, and any other it needs.

Install it Create an account

For developers: the calls your assistant makes

agent

// 1. search: find the tool
omnial_search({ query: "what you need" })

// 2. inspect: price and input schema
omnial_inspect({ tool: "omnial/x402-ssl-check" })

// 3. learn: read the usage guide at runtime
omnial_learn({ tool: "omnial/x402-ssl-check" })

// 4. run: price the exact call first, then run it
omnial_execute({ tool: "omnial/x402-ssl-check", input: { /* see input_schema */ }, dry_run: true })
omnial_execute({ tool: "omnial/x402-ssl-check", input: { /* ... */ } })

// 5. settle: the call is charged when it finishes, nothing to do

Not connected yet? Point your MCP client at https://mcp.eden-engine.com/mcp, then copy a config for your client.

Pricing

Every charge this tool can incur.

Charge	Price
Per call	$0.0487

Updated: Oct 27, 2026

Input and output schemas

Input schema

input_schema.json

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "description": "Domain name (e.g. example.com)"
    }
  },
  "additionalProperties": false
}

Output schema

output_schema.json

{
  "type": "object",
  "required": [
    "domain",
    "valid",
    "issuer",
    "subject",
    "subject_alt_names",
    "valid_from",
    "valid_to",
    "days_until_expiry",
    "is_expired",
    "is_expiring_soon",
    "serial_number",
    "fingerprint_sha256",
    "protocol",
    "cipher_name",
    "cipher_version"
  ],
  "properties": {
    "valid": {
      "type": "boolean",
      "description": "Whether the certificate is currently valid (not expired, chain trusted)."
    },
    "domain": {
      "type": "string",
      "description": "The domain that was checked, echoed back."
    },
    "issuer": {
      "type": "string",
      "description": "The certificate authority that issued the certificate, e.g. 'Google Trust Services'."
    },
    "subject": {
      "type": "string",
      "description": "The certificate's subject (commonly the primary domain it was issued for), e.g. '*.google.com'."
    },
    "protocol": {
      "type": "string",
      "description": "The negotiated TLS protocol version, e.g. 'TLSv1.3', 'TLSv1.2'."
    },
    "valid_to": {
      "type": "string",
      "description": "ISO 8601 timestamp the certificate expires."
    },
    "is_expired": {
      "type": "boolean",
      "description": "True once days_until_expiry has passed zero."
    },
    "valid_from": {
      "type": "string",
      "description": "ISO 8601 timestamp the certificate became valid."
    },
    "cipher_name": {
      "type": "string",
      "description": "The negotiated cipher suite's name, e.g. 'TLS_AES_256_GCM_SHA384'."
    },
    "serial_number": {
      "type": "string",
      "description": "The certificate's serial number, as issued by its CA."
    },
    "cipher_version": {
      "type": "string",
      "description": "The protocol version associated with the negotiated cipher suite."
    },
    "is_expiring_soon": {
      "type": "boolean",
      "description": "Whether the certificate is within the endpoint's own expiry-warning window."
    },
    "days_until_expiry": {
      "type": "number",
      "description": "Days remaining until valid_to. Negative when already expired -- observed -4178 on an expired test certificate, so a customer must check the sign, not just treat this as a countdown that stops at zero."
    },
    "subject_alt_names": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Every domain name the certificate covers, including the primary subject. Observed as 2 entries (a single-domain cert) and 68 entries (a multi-domain cert covering many related properties) -- length varies widely by domain, not a fixed count."
    },
    "fingerprint_sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the certificate, colon-delimited hex."
    }
  },
  "description": "The certificate record.",
  "additionalProperties": true
}