Geekflare
NewMCP server live

TLS Scan API for any domain.

Check which TLS and SSL versions a server supports, inspect its certificate, and test for known TLS vulnerabilities, all returned as structured JSON.

Get a free API key
4.9average across
G2 — 4.8 out of 5Google — 4.9 out of 5Product Hunt — 5.0 out of 5
  • 500 free credits every month
  • No card to start
  • Failed requests cost nothing

Try it on any domain

Try:
Trusted by teams at
PfizerNBCUniversalTCSHostingerKissflowLookoutPlivoClearSaleSparkianCBSplitOmreon
PfizerNBCUniversalTCSHostingerKissflowLookoutPlivoClearSaleSparkianCBSplitOmreon

A full TLS check in one request.

No OpenSSL commands and no scanners to run. Each request tests the server and returns protocols, certificate details and vulnerability checks as JSON.

Protocol support

See whether SSLv2, SSLv3, TLS 1.0, 1.1, 1.2 and 1.3 are enabled, and catch servers still offering outdated versions.

data.protocols

Certificate expiry

Get the valid-from and expiry dates, and whether the certificate has expired, to renew before visitors see a warning.

certificate.expiry

Trust and hostname

Check that the certificate is trusted, not self-signed, and matches the hostname, with the issuer and full chain.

certificate.trusted

Keys and ciphers

See the key size, the negotiated cipher and forward secrecy details, and flags for weak keys or signature algorithms.

certificate.keyBits

Vulnerability checks

Test for POODLE, DROWN, FREAK, Logjam, Sweet32, RC4, CRIME and weak cipher suites, with an advisory on BREACH.

data.vulnerabilities

Any domain or subdomain

Scan your own servers, your customers' custom domains, or any public host, including subdomains.

url: api.example.com

What customers say.

Read all reviews
“Its been couple of years we are using Geekflare API, we like its stable production ready performance and cost-effectiveness of accessing multiple APIs through a single plan.”
Jitendra RauloDirector, Aarav Infotech
“We use the DNS API to verify our customer's domain ownership, and so far it is great. It responds mostly in less than 1 second.”
Amit VasuDevOps Engineer
“Works like a charm, easy to use and great support. Wished they offer more features for me to use.”
Pavel MarešCEO, webtero.com

What you can do with the TLS Scan API.

Renew certificates before they expire

Scan your domains on a schedule and alert your team when a certificate is close to expiry, before browsers start showing warnings.

  • Expiry and valid-from dates
  • Expired and not-yet-valid flags
  • Works for every subdomain
Typical request
POST /tlsscan
{
  "url": "stripe.com"
}
Example output · stripe.com
certificate.expiryNov 12 23:59:59 2026 GMT
certificate.isExpiredfalse
certificate.issuerDigiCert Inc

Your first TLS scan, in a few lines.

quickstart.pyofficial SDK
# pip install geekflare-api
from geekflare_api.client import GeekflareClient
from geekflare_api.models import TlsScanDto

with GeekflareClient(api_key="<api-key>") as client:
    result = client.tls_scan(
        TlsScanDto(
            url="https://example.com"
        )
    )
    print(result)
TLS Scan Reference

One API. Every stack.

One account works from an agent, a workflow builder, an SDK or your own service.

MCP server

Sign in once and Claude, ChatGPT, Cursor or Codex can use Geekflare's tools directly, with no glue code to write.

ClaudeChatGPTCursorCodexAny MCP client
Set up the MCP server

LLM & agent pipelines

LLM-ready Markdown straight into a retrieval pipeline, with the boilerplate stripped so you spend context on content, not navigation.

RAGAgentsClean MarkdownGrounded search
See the solutions

Workflow builders

Run any endpoint as a step in a visual scenario. Useful when the person who needs the data does not write code.

ZapierMaken8n
Browse integrations

SDKs & REST

First-party typed SDKs for Python and Node. Everything else talks plain REST, from any language.

PythonNode.jsPostman
Open the API reference

How many scans each plan covers.

Every scan costs the same, with protocols, certificate and vulnerability checks included. Failed requests cost nothing.

2 months free
  • Free
    $0/mo
    No card
    Credits a month
    500
    Scans1 credit
    500
    Requests per second
    1
  • Starter
    $19/mo
    Credits a month
    20,000
    Scans1 credit
    20,000
    Requests per second
    5
  • GrowthMost popular
    $69/mo
    Credits a month
    100,000
    Scans1 credit
    100,000
    Requests per second
    10
  • Business 500K
    $299/mo
    Credits a month
    500,000
    Scans1 credit
    500,000
    Requests per second
    25
  • Business 1M
    $499/mo
    Credits a month
    1,000,000
    Scans1 credit
    1,000,000
    Requests per second
    25
Start freeCompare plans and credit packsEvery account starts free. Upgrade when you need more, or buy a credit pack from $10.

Before you integrate TLS scans.

Everything else is in the endpoint docs, and our support team replies to every email.

Open the endpoint docs

Which protocol versions the server supports, from SSLv2 to TLS 1.3, the certificate details (issuer, dates, key size, chain, trust and hostname match), and the results of known TLS vulnerability tests.

A scan costs 1 credit. Failed requests cost nothing.

Yes. The scan reports support for every version from SSLv2 through TLS 1.3, so you can confirm modern protocols are on and outdated ones are off.

Yes. Pass any hostname, such as api.example.com, to scan that server's TLS setup.

Yes. Run scans in the dashboard playground, use it from Zapier, Make or n8n, or let AI agents call it through our MCP server.

Ask AI about Geekflare

Open the question in the assistant you already use.

500 scans a month, free.

The free tier renews every month and needs no card. Scan your first domain in a single call.

Get your API keyRead the docs