# CertScope API
> Programmatic SSL/TLS 90-Day Expiry Sentry and Post-Quantum Cryptography (NIST ML-KEM) Auditor.

CertScope audits SSL/TLS certificate lifetime against CA/B Forum 90-day standards, tests NIST FIPS 203 Post-Quantum Cryptography (ML-KEM/Kyber768) readiness, verifies DNS CAA record restrictions, and evaluates HSTS preload status.

## Core Endpoints
- [Execute TLS Audit](https://cert.scopekit.net/v1/audit?domain=example.com): Full 4-vector cryptographic audit with 0-100 score and diagnosis.
- [Interactive API Documentation](https://cert.scopekit.net/docs): Interactive Swagger API documentation console.
- [OpenAPI 3.0 Specification](https://cert.scopekit.net/v1/openapi.json): Standard machine-readable OpenAPI schema for agents and developers.
- [Sister Tool: CookieScope GDPR Sentry](https://cookiescope.agentlabs.workers.dev): Audit zero-consent cookies and font IP leaks.
- [Sister Tool: MailLock Deliverability](https://maillock.agentlabs.workers.dev): Audit SPF, DMARC, DKIM, and dangling CNAME takeovers.
- [Sister Tool: GEOScope AI Search Audit](https://geoscope.agentlabs.workers.dev): Audit website AI bot visibility and /llms.txt optimization.
- [Sister Tool: StackScope Tech Intelligence](https://stackscope.agentlabs.workers.dev): Sub-50ms website tech stack and framework detection.

## Authentication
Tier 1 Diagnostic endpoints (/v1/audit, /v1/audit/tls, /v1/audit/pqc, /v1/audit/caa, /v1/audit/hsts) are free.
Tier 2 (Pro Remediation: Renewal Configs, CAA Records) and Tier 3 (Agency Suite: Printable Certificate) require an API key passed via 'X-API-Key' or '?api_key='.
Evaluation key: 'certscope_eval_2026'.