# SSL Labs API: Check a website's SSL Labs HTTPS grade

> Checks a website's HTTPS setup with SSL Labs: overall grade, per-server grades, certificate issuer and expiry, supported protocols and known weaknesses. Reuses cached reports from the last 72 hours unless a fresh test is requested.

Unofficial. Not affiliated with or endorsed by SSL Labs.

- Page: https://fous.com/methods/ssllabs.com/check-ssl-certificate
- Method: `ssllabs.com/check_ssl_certificate`, version 1
- Website: ssllabs.com
- Returns: domain, overall grade, servers, certificate issuer and expiry, protocols, known weaknesses, test date, results link
- Effect: read (it gets data and changes nothing)
- Sign-in: none needed
- Cost: 1 credit per completed run (1¢ with pay as you go); failed runs are free
- Verified: Nov 2, 2026

## Inputs

| Field | Type | Required | In the run below | Description |
|---|---|---|---|---|
| `website` | string | yes | `"www.ssllabs.com"` | Website domain or URL, for example https://github.com/about. |
| `use_cached` | boolean | no | `false` | Reuse a report from the last 72 hours when available, for example true; set false to request a fresh test. Default true. |

## Output

From a run on Oct 23, 2026. Its input:

```json
{
  "website": "www.ssllabs.com",
  "use_cached": false
}
```

Its output:

```json
{
  "domain": "www.ssllabs.com",
  "servers": [
    {
      "grade": "A+",
      "ip_address": "69.67.183.100",
      "results_page_link": "https://www.ssllabs.com/ssltest/analyze.html?d=www.ssllabs.com&hideResults=on&s=69.67.183.100"
    }
  ],
  "test_date": "2026-10-23",
  "overall_grade": "A+",
  "known_weaknesses": [],
  "days_until_expiry": 107,
  "results_page_link": "https://www.ssllabs.com/ssltest/analyze.html?d=www.ssllabs.com&hideResults=on",
  "certificate_issuer": "DigiCert Inc",
  "supported_protocols": [
    "TLS 1.3",
    "TLS 1.2"
  ],
  "certificate_expiry_date": "2027-02-07"
}
```

## Run it

From code, with a Fous API key in `FOUS_API_KEY`; the answer's `data` holds the output:

```bash
curl https://api.fous.com/v1/runs \
  -H "Authorization: Bearer $FOUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"method":"ssllabs.com/check_ssl_certificate","input":{"website":"www.ssllabs.com","use_cached":false}}'
```

From an AI agent connected to the Fous MCP server: its `run` with the same method and input. To connect one, give it `set up https://fous.com/SKILL.md`.

## Ask your agent

- What grade does my site get on an SSL Labs HTTPS test for example.com?
- Can you pull the latest cached SSL Labs report for github.com/about and tell me the overall grade?
- Run a fresh HTTPS check on mybank-portal.net and show me the per-server grades and weaknesses.
- Is the certificate on shop.example.org close to expiring, and who issued it? Check its HTTPS setup.
- Give me the supported TLS protocols and any known vulnerabilities for api.acme-tools.io, using a new scan instead of cached results.

## Input schema

```json
{
  "type": "object",
  "required": [
    "website"
  ],
  "properties": {
    "website": {
      "type": "string",
      "description": "Website domain or URL, for example https://github.com/about."
    },
    "use_cached": {
      "type": "boolean",
      "default": true,
      "description": "Reuse a report from the last 72 hours when available, for example true; set false to request a fresh test."
    }
  }
}
```

## Output schema

```json
{
  "type": "object",
  "required": [
    "domain",
    "overall_grade",
    "servers",
    "certificate_issuer",
    "certificate_expiry_date",
    "days_until_expiry",
    "supported_protocols",
    "known_weaknesses",
    "test_date",
    "results_page_link"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "description": "Website domain that was tested."
    },
    "servers": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "ip_address",
          "grade",
          "results_page_link"
        ],
        "properties": {
          "grade": {
            "type": [
              "string",
              "null"
            ]
          },
          "ip_address": {
            "type": "string"
          },
          "results_page_link": {
            "type": "string"
          }
        },
        "additionalProperties": false
      },
      "description": "Server addresses and grades."
    },
    "test_date": {
      "type": "string",
      "format": "date"
    },
    "overall_grade": {
      "type": "string",
      "description": "Lowest SSL Labs grade across the tested servers."
    },
    "known_weaknesses": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "days_until_expiry": {
      "type": [
        "integer",
        "null"
      ]
    },
    "results_page_link": {
      "type": "string"
    },
    "certificate_issuer": {
      "type": [
        "string",
        "null"
      ]
    },
    "supported_protocols": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "certificate_expiry_date": {
      "type": [
        "string",
        "null"
      ],
      "format": "date"
    }
  },
  "additionalProperties": false
}
```

## See more

- [Cloudflare API: Get domain rank](https://fous.com/methods/radar.cloudflare.com/get-domain-rank.md): Gets a website's worldwide popularity bucket, exact rank when shown, categories, and recent weekly rank history from Cloudflare Radar. Historical rank points are available only for top-100 domains; other ranked domains have an empty history.
- [BuiltWith API: Get website technologies](https://fous.com/methods/builtwith.com/get-website-technologies.md): Gets the technologies shown in a website's free BuiltWith profile, grouped in the order BuiltWith displays them. A company name is matched to its official website through a public web search.
- [web.dev API: Check page speed](https://fous.com/methods/pagespeed.web.dev/check-page-speed.md): Tests a web page with Google PageSpeed Insights on mobile or desktop: performance, accessibility, best practices and SEO scores, lab timings, real-user Core Web Vitals when available, and the top suggested fixes.
- [Similarweb API: Get website traffic](https://fous.com/methods/similarweb.com/get-website-traffic.md): Gets a website's monthly traffic estimate, rankings, engagement and top countries from Similarweb's free public overview. Traffic-source percentages withheld by the site are null; the site may limit anonymous views.
- [Trustpilot API: Get company rating](https://fous.com/methods/trustpilot.com/get-company-rating.md): Gets a company's Trustpilot rating summary from its name or website: TrustScore, rating label, total reviews, star breakdown, categories, claimed status, reply statistics and location when shown.
- [crt.sh API: Search certificates](https://fous.com/methods/crt.sh/search-certificates.md): Finds certificates issued for a domain and its subdomains on crt.sh, with the DNS names each certificate covers. Expired certificates are excluded unless requested.
- [Downdetector API: Check service status](https://fous.com/methods/downdetector.com/check-service-status.md): Checks whether an app or website has current problems in a country on Downdetector: its status, reports in the latest 15-minute interval, the usual report count, the most reported problem types and the most affected locations when shown. The service must have a public Downdetector page in that country.
- [Google DNS API: Get DNS records](https://fous.com/methods/dns.google/get-dns-records.md): Looks up DNS records for a domain or pasted website link and summarizes its SPF record, DMARC policy and mail servers. A missing record type yields an empty records list.