TLS Scan API for any domain.
Check which TLS and SSL versions a server supports, inspect its certificate, and test for known TLS vulnerabilities, all returned as structured JSON.
- 500 free credits every month
- No card to start
- Failed requests cost nothing
POST /tlsscan
{
"url": "stripe.com"
}
A full TLS check in one request.
No OpenSSL commands and no scanners to run. Each request tests the server and returns protocols, certificate details and vulnerability checks as JSON.
Protocol support
See whether SSLv2, SSLv3, TLS 1.0, 1.1, 1.2 and 1.3 are enabled, and catch servers still offering outdated versions.
data.protocolsCertificate expiry
Get the valid-from and expiry dates, and whether the certificate has expired, to renew before visitors see a warning.
certificate.expiryTrust and hostname
Check that the certificate is trusted, not self-signed, and matches the hostname, with the issuer and full chain.
certificate.trustedKeys and ciphers
See the key size, the negotiated cipher and forward secrecy details, and flags for weak keys or signature algorithms.
certificate.keyBitsVulnerability checks
Test for POODLE, DROWN, FREAK, Logjam, Sweet32, RC4, CRIME and weak cipher suites, with an advisory on BREACH.
data.vulnerabilitiesAny domain or subdomain
Scan your own servers, your customers' custom domains, or any public host, including subdomains.
url: api.example.comWhat you can do with the TLS Scan API.
Renew certificates before they expire
Scan your domains on a schedule and alert your team when a certificate is close to expiry, before browsers start showing warnings.
- Expiry and valid-from dates
- Expired and not-yet-valid flags
- Works for every subdomain
POST /tlsscan
{
"url": "stripe.com"
}Your first TLS scan, in a few lines.
# pip install geekflare-api
from geekflare_api.client import GeekflareClient
from geekflare_api.models import TlsScanDto
with GeekflareClient(api_key="<api-key>") as client:
result = client.tls_scan(
TlsScanDto(
url="https://example.com"
)
)
print(result)One API. Every stack.
The same key works from an agent, a workflow builder, an SDK or your own service. Pick the lane you already live in.
MCP server
One remote endpoint exposes Geekflare's tools to any MCP client. Your agent discovers them itself: no glue code, no per-tool wiring.
Claude
Cursor
Codexany MCP clientLLM & agent pipelines
LLM-ready Markdown straight into a retrieval pipeline, with the boilerplate stripped so you spend context on content, not navigation.
Workflow builders
Run any endpoint as a step in a visual scenario. Useful when the person who needs the data does not write code.
SDKs & REST
First-party typed SDKs for Python and Node. Everything else talks plain REST, from any language.
PythonNode.jsPostman1 credit a scan. Here is what that buys.
Credits are shared with every other Geekflare API. Failed requests cost nothing.
Growth covers up to ~100,000 scans a month (100K credits), about $0.69 per 1,000 scans. Or $58/mo billed yearly.
- 500 credits / month
- 1 team member
- 7 days log retention
- 1 request per second
- 10K credits / month
- 3 team members
- 30 days log retention
- 5 requests per second
- 100K credits / month
- 5 team members
- 30 days log retention
- 10 requests per second
- 1M credits / month
- 25 team members
- 90 days log retention
- 25 requests per second
Loved by developers worldwide.
“Its been couple of years we are using Geekflare API, we like its stable production ready performance and cost-effectiveness of accessing multiple APIs through a single plan.”
Jitendra RauloDirector, Aarav Infotech“We use the DNS API to verify our customer's domain ownership, and so far it is great. It responds mostly in less than 1 second.”
“Works like a charm, easy to use and great support. Wished they offer more features for me to use.”
Pavel MarešCEO, webtero.comBefore you integrate TLS scans.
Everything else is in the endpoint docs, and our support team replies to every email.
Open the endpoint docsapi.example.com, to scan that server's TLS setup.500 scans a month, free.
The free tier renews every month and needs no card. Scan your first domain in a single call.