Skip to content

SSL Labs API: Check a website's SSL Labs HTTPS grade

Checks a website's HTTPS setup with SSL Labs: overall grade, per-server grades, certificate issuer and expiry, supported protocols and known weaknesses. Reuses cached reports from the last 72 hours unless a fresh test is requested.

ssllabs.com (opens in a new tab)Version 1ReadNo sign-inVerified Nov 2, 2026

Unofficial. Not affiliated with or endorsed by SSL Labs.

Inputs

Values from the run on Oct 23, 2026, shown under Output.

Website, requiredwebsite

Website domain or URL, for example https://github.com/about.

www.ssllabs.com

Use Cached optionaluse_cached

Reuse a report from the last 72 hours when available, for example true; set false to request a fresh test.

false

True or false. Default true.

Output

From a run on Oct 23, 2026.
{  "domain": "www.ssllabs.com",  "servers": [    {      "grade": "A+",      "ip_address": "69.67.183.100",      "results_page_link": "https://www.ssllabs.com/ssltest/analyze.html?d=www.ssllabs.com&hideResults=on&s=69.67.183.100"    }  ],  "test_date": "2026-10-23",  "overall_grade": "A+",  "known_weaknesses": [],  "days_until_expiry": 107,  "results_page_link": "https://www.ssllabs.com/ssltest/analyze.html?d=www.ssllabs.com&hideResults=on",  "certificate_issuer": "DigiCert Inc",  "supported_protocols": [    "TLS 1.3",    "TLS 1.2"  ],  "certificate_expiry_date": "2027-02-07"}
Price
1 credit per completed run (1¢ with pay as you go); failed runs are free.
Method
ssllabs.com/check_ssl_certificate
Returns
domain, overall grade, servers, certificate issuer and expiry, protocols, known weaknesses, test date, results link

Use it from your agent

Give your agent this line. It reads SKILL.md, gets a Fous API key and connects the Fous MCP server. Its run then takes the method ssllabs.com/check_ssl_certificate with the inputs above.

Ask your agent

  • What grade does my site get on an SSL Labs HTTPS test for example.com?
  • Can you pull the latest cached SSL Labs report for github.com/about and tell me the overall grade?
  • Run a fresh HTTPS check on mybank-portal.net and show me the per-server grades and weaknesses.
  • Is the certificate on shop.example.org close to expiring, and who issued it? Check its HTTPS setup.
  • Give me the supported TLS protocols and any known vulnerabilities for api.acme-tools.io, using a new scan instead of cached results.

See more

  • Gets a website's worldwide popularity bucket, exact rank when shown, categories, and recent weekly rank history from Cloudflare Radar. Historical rank points are available only for top-100 domains; other ranked domains have an empty history.

    radar.cloudflare.com/get_domain_rank
  • Gets the technologies shown in a website's free BuiltWith profile, grouped in the order BuiltWith displays them. A company name is matched to its official website through a public web search.

    builtwith.com/get_website_technologies
  • Tests a web page with Google PageSpeed Insights on mobile or desktop: performance, accessibility, best practices and SEO scores, lab timings, real-user Core Web Vitals when available, and the top suggested fixes.

    pagespeed.web.dev/check_page_speed
  • Gets a website's monthly traffic estimate, rankings, engagement and top countries from Similarweb's free public overview. Traffic-source percentages withheld by the site are null; the site may limit anonymous views.

    similarweb.com/get_website_traffic
  • Gets a company's Trustpilot rating summary from its name or website: TrustScore, rating label, total reviews, star breakdown, categories, claimed status, reply statistics and location when shown.

    trustpilot.com/get_company_rating
  • Finds certificates issued for a domain and its subdomains on crt.sh, with the DNS names each certificate covers. Expired certificates are excluded unless requested.

    crt.sh/search_certificates
  • Checks whether an app or website has current problems in a country on Downdetector: its status, reports in the latest 15-minute interval, the usual report count, the most reported problem types and the most affected locations when shown. The service must have a public Downdetector page in that country.

    downdetector.com/check_service_status
  • Looks up DNS records for a domain or pasted website link and summarizes its SPF record, DMARC policy and mail servers. A missing record type yields an empty records list.

    dns.google/get_dns_records