@t0mer/n8n-nodes-ssllabs 2026.9.0 → 2026.10.0

package/README.md

@@ -1,16 +1,20 @@
 # @t0mer/n8n-nodes-ssllabs
 
+[![npm version](https://img.shields.io/npm/v/@t0mer/n8n-nodes-ssllabs)](https://www.npmjs.com/package/@t0mer/n8n-nodes-ssllabs)
+[![CI](https://github.com/t0mer/n8n-nodes-ssllabs/actions/workflows/ci.yml/badge.svg)](https://github.com/t0mer/n8n-nodes-ssllabs/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/LICENSE)
+
 An [n8n](https://n8n.io/) community node for the [Qualys SSL Labs API v4](https://github.com/ssllabs/ssllabs-scan/blob/master/ssllabs-api-docs-v4.md). It runs SSL/TLS server assessments, returns grades, endpoint details and certificate data, and watches your hosts for grade or certificate changes.
 
 It ships two nodes and one credential:
 
 | | |
 |---|---|
-| **SSL Labs** | Action node: run assessments, read endpoint details, get service info, and register your email |
+| **SSL Labs** | Action node: run assessments, read endpoint details, get service info, and register your email. It can also be used as a tool by an n8n AI Agent. |
 | **SSL Labs Trigger** | Polling trigger: grade changed, grade below a threshold, or certificate expiring |
 | **SSL Labs API** | Credential: your registered email address and the API base URL |
 
-> **Not affiliated with Qualys.** This is an unofficial, community-maintained node. SSL Labs is a free service provided by Qualys; use it according to the [SSL Labs terms](https://www.ssllabs.com/about/terms.html). **Only assess hosts you own or are authorized to test.**
+> **Unofficial. Not affiliated with, endorsed by, or supported by Qualys.** This is a community-maintained node. SSL Labs is a free service provided by Qualys; use it according to the [SSL Labs terms and conditions](https://www.ssllabs.com/about/terms.html). **Only assess hosts you own or are authorized to test.** See [Terms of use and privacy](#terms-of-use-and-privacy).
 
 - [Demo](#demo)
 - [Installation](#installation)
@@ -18,15 +22,22 @@ It ships two nodes and one credential:
 - [Credentials](#credentials)
 - [SSL Labs node](#ssl-labs-node)
 - [SSL Labs Trigger](#ssl-labs-trigger)
+- [Example workflows](#example-workflows)
 - [Rate limits and timing](#rate-limits-and-timing)
+- [Terms of use and privacy](#terms-of-use-and-privacy)
+- [Security notes](#security-notes)
 - [Compatibility](#compatibility)
+- [Development](#development)
+- [Contributing](#contributing)
 - [Resources](#resources)
+- [License](#license)
 
 ## Demo
 
-[![SSL Labs for n8n demo: credential, registration, Analyze and the trigger's test event](https://raw.githubusercontent.com/t0mer/n8n-nodes-ssllabs/main/assets/demo/ssllabs-demo.png)](https://github.com/t0mer/n8n-nodes-ssllabs/raw/main/assets/demo/ssllabs-demo.mp4)
+[![SSL Labs for n8n demo: credential, registration, Analyze and the trigger's test event](https://raw.githubusercontent.com/t0mer/n8n-nodes-ssllabs/main/assets/demo/ssllabs-demo.png)](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/assets/demo/ssllabs-demo.mp4)
+
+▶️ [Watch the demo video](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/assets/demo/ssllabs-demo.mp4) (2½ min). It shows:
 
-▶️ [Watch the demo video](https://github.com/t0mer/n8n-nodes-ssllabs/raw/main/assets/demo/ssllabs-demo.mp4) (2½ min). It shows:
 - the credential
 - a free-mailbox registration being rejected (email addresses are blurred)
 - Get Info, then Analyze of `www.ssllabs.com`, with cache on and publish off
@@ -36,13 +47,14 @@ It ships two nodes and one credential:
 
 **From the n8n UI** (self-hosted): go to **Settings → Community Nodes → Install**, enter `@t0mer/n8n-nodes-ssllabs`, and confirm.
 
-**From npm**, in your n8n custom nodes folder (usually `~/.n8n/nodes`):
+**Manually from npm**, in your n8n custom nodes folder (usually `~/.n8n/nodes`):
 
 ```bash
+mkdir -p ~/.n8n/nodes && cd ~/.n8n/nodes
 npm install @t0mer/n8n-nodes-ssllabs
 ```
 
-Then restart n8n. See the [community nodes installation guide](https://docs.n8n.io/integrations/community-nodes/installation/) for details.
+Then restart n8n. See the [community nodes installation guide](https://docs.n8n.io/integrations/community-nodes/installation-and-management/) for details, including installs in Docker.
 
 ## Registration
 
@@ -50,7 +62,7 @@ API v4 requires every caller to register an email address once. Qualys rejects f
 
 You can register in either of two ways:
 
-- **With this node:** add an **SSL Labs** node and choose **Resource: Registration → Register**. Fill in first name, last name, email and organization, then run it. This operation does not need a credential; if you attach one, its base URL is used. Any rejection message from SSL Labs is shown as-is.
+- **With this node:** add an **SSL Labs** node and choose **Resource: Registration → Register**. Fill in first name, last name, email and organization, then run it. This operation does not need a credential; if you attach one, its base URL is used. If SSL Labs rejects the request with HTTP 400 (for example, for a free mailbox address), the node fails with *"SSL Labs rejected the request parameters: …"* followed by the field and reason SSL Labs gave, such as `email: …`. If SSL Labs answers with HTTP 200 but a `failure` status, the node fails with *"SSL Labs registration failed: …"* and the reason.
 - **With the official CLI:** build and run `ssllabs-scan-v4-register` from the [ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) repository. Its README lists the flags it takes.
 
 You only register once per email address.
@@ -59,18 +71,25 @@ You only register once per email address.
 
 Create an **SSL Labs API** credential:
 
-| Field | Description |
-|---|---|
-| **Email** | The address you registered. It is sent as the `email` header on every call. |
-| **Base URL** | Defaults to `https://api.ssllabs.com/api/v4`. Use `https://api.dev.ssllabs.com/api/v4` for the development server, which has lower limits and no availability guarantee. |
+| Field | Default | Description |
+|---|---|---|
+| **Email** | — (required) | The address you registered. It is sent as the `email` header on every call. |
+| **Base URL** | `https://api.ssllabs.com/api/v4` | Use an `https://` URL. The node's operations and the trigger refuse any other URL with *"Base URL must start with https://"*, but the credential test does not check it: an `http://` URL would be tested over cleartext, with your email in the header. Use `https://api.dev.ssllabs.com/api/v4` for the development server, which has lower limits and no availability guarantee. |
 
 The credential test calls `/info`, so it only proves that the API is reachable. An unregistered email fails on the first assessment with *"Email is not registered with SSL Labs v4 — use the Register operation first"*.
 
 ## SSL Labs node
 
+| Resource | Operations |
+|---|---|
+| **Assessment** | Analyze |
+| **Endpoint** | Get |
+| **Registration** | Register |
+| **Service** | Get Info, Get Root Certificates, Get Status Codes |
+
 ### Assessment → Analyze
 
-This operation assesses a host. The **Host** field takes a bare hostname; if you paste a URL such as `https://Example.com:443/path`, it is reduced to `example.com`.
+This operation assesses a host. The **Host** field takes a bare hostname; if you paste a URL such as `https://Example.com:443/path`, it is reduced to `example.com`. Input that leaves no valid hostname fails with *"… is not a valid hostname"*.
 
 | Mode | What it does |
 |---|---|
@@ -83,21 +102,21 @@ This operation assesses a host. The **Host** field takes a bare hostname; if you
 | Parameter | Default | Notes |
 |---|---|---|
 | Use Cache | on | Accept a cached report (`fromCache=on`). |
-| Max Cache Age (Hours) | 24 | Only accept cached reports up to this old. `0` accepts any age. |
-| Force New Scan | off | Only shown when Use Cache is off. Sends `startNew=on`. SSL Labs does not allow both flags at once, and the node rejects that combination too. |
+| Max Cache Age (Hours) | 24 | Only shown when Use Cache is on. Only accept cached reports up to this old. `0` accepts any age. |
+| Force New Scan | off | Only shown when Use Cache is off and Mode is Wait for Result or Start Only. Sends `startNew=on` on the first call only, because repeating it while polling would restart the assessment. SSL Labs does not allow `startNew` and `fromCache` together, so the node never sends both. |
 
 **Options**
 
 | Option | Default | Notes |
 |---|---|---|
-| Batch Concurrency | 3 | Maximum parallel assessments when there are several input items (max 10). |
+| Batch Concurrency | 3 | Maximum parallel assessments when there are several input items (1–10). |
 | Detail Level | Summary | **Summary** returns the compact shape below. **Full** returns the raw SSL Labs `Host` object plus `reportUrl`. |
-| Fail on Assessment Error | on | When off, an assessment that ends in ERROR is returned as an item instead of failing the node. |
-| Ignore Certificate Mismatch | off | Continue even when the certificate does not match the hostname. |
-| Initial Poll Interval (Seconds) | 5 | How often to poll while the status is `DNS` (minimum 5). |
-| Poll Interval (Seconds) | 10 | How often to poll once the status is `IN_PROGRESS` (minimum 5). |
+| Fail on Assessment Error | on | When off, an assessment that ends in ERROR is returned as an item instead of failing the node with *"Assessment of … failed: …"*. |
+| Ignore Certificate Mismatch | off | Continue even when the certificate does not match the hostname (`ignoreMismatch=on`). |
+| Initial Poll Interval (Seconds) | 5 | Wait for Result only. How often to poll while the status is `DNS` (minimum 5). |
+| Poll Interval (Seconds) | 10 | Wait for Result only. How often to poll once the status is `IN_PROGRESS` (minimum 5). |
 | Publish Results | **off** | ⚠️ **Published results appear on the public SSL Labs boards.** Leave this off unless you really want that. |
-| Timeout (Minutes) | 15 | How long Wait for Result keeps polling before it fails. |
+| Timeout (Minutes) | 15 | Wait for Result only. How long to keep polling before failing with *"Assessment of … did not finish within … minutes"* (minimum 1). |
 
 **Summary output** (one item per host):
 
@@ -111,8 +130,10 @@ This operation assesses a host. The **Host** field takes a bare hostname; if you
   "bestGrade": "A+",
   "hasWarnings": true,
   "endpoints": [
-    { "ipAddress": "93.184.216.34", "serverName": "example.com", "grade": "A", "gradeTrustIgnored": "A",
-      "hasWarnings": false, "isExceptional": false, "statusMessage": "Ready" }
+    { "ipAddress": "93.184.216.34", "serverName": "example.com", "grade": "A+", "gradeTrustIgnored": "A+",
+      "hasWarnings": false, "isExceptional": true, "statusMessage": "Ready" },
+    { "ipAddress": "2606:2800:220:1:248:1893:25c8:1946", "serverName": "example.com", "grade": "B", "gradeTrustIgnored": "B",
+      "hasWarnings": true, "isExceptional": false, "statusMessage": "Ready" }
   ],
   "certificate": {
     "subject": "CN=example.com", "issuer": "CN=R11, O=Let's Encrypt, C=US",
@@ -128,11 +149,13 @@ This operation assesses a host. The **Host** field takes a bare hostname; if you
 
 A few details about these fields:
 
-- `grade` is the **worst** grade across all endpoints that have one. That makes it the conservative value to alert on. Endpoints that could not be tested have no grade and are ignored.
+- `grade` is the **worst** grade across all endpoints that have one. That makes it the conservative value to alert on. Endpoints that could not be tested have no grade and are ignored; when no endpoint has a grade, `grade` is `null`.
+- `hasWarnings` is `true` when any endpoint has warnings.
+- `certificate` is the leaf certificate: the first certificate chain leaf, across endpoints in order, that matches a certificate in the result. When none matches, it falls back to the first certificate. `fingerprint` is its SHA-256 hash (or SHA-1, serial number or ID when that is missing), and `daysUntilExpiry` is computed when the item is produced.
 - Grades rank from best to worst as `A+ > A > A- > B > C > D > E > F > T > M`. `T` (trust issues) and `M` (certificate name mismatch) rank below `F`.
 - All timestamps are ISO-8601 strings.
 
-**Several input items:** the node reads `/info` once, then runs at most `min(Batch Concurrency, maxAssessments − currentAssessments)` assessments at a time, and never fewer than 1. It spaces new assessments by SSL Labs' `newAssessmentCoolOff`.
+**Several input items:** the node reads `/info` once, then runs at most `min(Batch Concurrency, maxAssessments − currentAssessments)` assessments at a time, and never fewer than 1. It spaces new assessments by SSL Labs' `newAssessmentCoolOff` plus a small margin (1.1 seconds when `/info` does not report one). If `/info` cannot be read, it runs one assessment at a time.
 
 - With **Continue On Fail**, a failed item becomes `{ "error": "…", "host": "…" }` and the other items keep going.
 - Without it, the first failure cancels the rest of the batch.
@@ -146,7 +169,7 @@ Example: check your own hosts and alert if the grade is below A.
 
 ### Endpoint → Get
 
-This operation returns the full SSL Labs `Endpoint` object for one IP address of an assessed host (`getEndpointData`). Set **Host** and **IP Address**; the IP address is listed in the `endpoints` of an Analyze result. **Use Cache** (default on) returns the cached data. This operation never starts a new assessment.
+This operation returns the full SSL Labs `Endpoint` object for one IP address of an assessed host (`getEndpointData`). Set **Host** and **IP Address**; the IP address is listed in the `endpoints` of an Analyze result (brackets around an IPv6 address are removed). **Use Cache** (default on) returns the cached data. This operation never starts a new assessment.
 
 ### Service
 
@@ -154,7 +177,7 @@ This operation returns the full SSL Labs `Endpoint` object for one IP address of
 |---|---|
 | **Get Info** | Availability, engine and criteria versions, `maxAssessments`, `currentAssessments`, `newAssessmentCoolOff`, and messages |
 | **Get Status Codes** | The `statusDetails` code → English message map |
-| **Get Root Certificates** | `{ trustStoreId, trustStore, certificates }` where `certificates` is the raw PEM text. Trust stores: 1 Mozilla, 2 Apple MacOS, 3 Android, 4 Java, 5 Windows. |
+| **Get Root Certificates** | `{ trustStoreId, trustStore, certificates }` where `certificates` is the raw PEM text. Choose the **Trust Store**: Mozilla (1, default), Apple MacOS (2), Android (3), Java (4) or Windows (5). |
 
 ### Registration → Register
 
@@ -166,16 +189,16 @@ The trigger polls SSL Labs on the schedule you set in n8n. It **never waits for
 
 | Parameter | Default | Notes |
 |---|---|---|
-| Hosts | — | The hostnames to watch. Add one per value; comma-separated values also work. |
+| Hosts | — | The hostnames to watch. Add one per value; comma- or space-separated values also work. URLs are reduced to their hostname, and duplicates are removed. An invalid hostname fails the poll. |
 | Event | Grade Changed | See the table below. |
 | Threshold Grade | A | For **Grade Below Threshold**. |
 | Days Before Expiry | 21 | For **Certificate Expiring**. |
-| Max Result Age (Hours) | 24 | Cached results up to this old are reused, so each host is re-assessed at most this often. |
-| Emit Errors (option) | off | Emit an `assessmentError` item when a host's assessment ends in ERROR. |
+| Max Result Age (Hours) | 24 | Cached results up to this old are reused, so each host is re-assessed at most this often (minimum 1). |
+| Emit Errors (option) | off | Emit an item with `event: "assessmentError"` when a host's assessment ends in ERROR. |
 
 | Event | Fires when |
 |---|---|
-| **Grade Changed** | A host's grade differs from the last grade seen. The output includes `previousGrade`. |
+| **Grade Changed** | A host's grade differs from the last grade seen. The output includes `previousGrade`. A result without a grade does not count as a change. |
 | **Grade Below Threshold** | The grade becomes worse than the threshold. It fires **once** when the grade crosses the threshold, and re-arms when the grade recovers. The output includes `previousGrade` and `thresholdGrade`. |
 | **Certificate Expiring** | `daysUntilExpiry` is at or below the limit. It fires **once per certificate**, keyed on its fingerprint, and a renewed certificate re-arms it. The output includes `previousCertificate` when the certificate changed. |
 
@@ -189,32 +212,64 @@ How the trigger behaves:
   - Grade Below Threshold starts tracking at the first graded result after the event or threshold is selected, so it also begins with a silent baseline.
   - Grade Changed compares against the last grade seen, whichever event was selected at the time.
   - Certificate Expiring alerts on the next poll for a certificate already inside the window, even right after you switch to this event.
-- **Fetch Test Event** (manual mode) returns the current summary of each host with `event: "test"`, so you can map fields. It does not change the stored state.
+- **Fetch Test Event** (manual mode) returns the current summary of each host with `event: "test"`, so you can map fields. It does not change the stored state. A host with no fresh cached result comes back with its in-progress status, because SSL Labs starts an assessment for it.
 - Hosts whose assessment is still running are marked as pending and checked again on the next poll.
+- Hosts are checked least recently checked first. A poll stops starting new checks once it has used 80% of n8n's poll time budget; the remaining hosts go first on the next poll.
 - Days until expiry are recomputed on every poll from the certificate's `notAfter` date.
+- **Emit Errors** only fires for a host that already had a result, and only when the error message changes, so a host that keeps failing with the same error alerts once.
 - How the trigger handles errors:
   - **SSL Labs busy (429, 503 or 529):** the poll stops quietly. The remaining hosts are checked first on the next poll.
-  - **Server error or network trouble:** that host is skipped until the next poll.
+  - **Server error or network trouble:** that host is skipped until the next poll. If it happens for **every** host, the poll fails, since that usually means a wrong base URL or an outage.
   - **400 for a host:** recorded as that host's error.
   - **Configuration problems** (unregistered email, a non-https base URL, 401/403/404): the trigger fails, so you see the problem.
-- After a call that starts a new assessment, the trigger waits SSL Labs' `newAssessmentCoolOff` before checking the next host.
+- After a call that probably started a new assessment (the host was not already pending and the result is not finished), the trigger waits SSL Labs' `newAssessmentCoolOff` plus a small margin (1.1 seconds by default) before checking the next host.
+- Hosts removed from the list are dropped from the stored state.
 - The stored state is versioned (`stateVersion: 1`).
 
+## Example workflows
+
+Import any of these from [`examples/`](https://github.com/t0mer/n8n-nodes-ssllabs/tree/main/examples) with **Workflows → Import from File** (or import from URL, using the file's raw link). The hostnames are placeholders; replace them with hosts you own or are authorized to test, and register your email first (see [Registration](#registration)).
+
+| File | What it does |
+|---|---|
+| [`weekly-ssl-grade-report.json`](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/examples/weekly-ssl-grade-report.json) | Every Monday, assesses a list of hosts and appends grades and certificate expiry dates to Google Sheets. It also emails a summary. |
+| [`alert-on-grade-drop-or-expiring-certificate.json`](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/examples/alert-on-grade-drop-or-expiring-certificate.json) | Two triggers: send a Slack alert when a grade drops below A or a certificate expires within 21 days. |
+| [`on-demand-scan-webhook.json`](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/examples/on-demand-scan-webhook.json) | A webhook that returns the grade of a posted host, or the assessment's progress so the caller can poll again. |
+| [`ai-agent-ssl-tool.json`](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/examples/ai-agent-ssl-tool.json) | An AI Agent that uses the node as a tool to answer "what grade does my site get?" and "when does my certificate expire?" |
+
 ## Rate limits and timing
 
 - An assessment usually takes **1–5 minutes per IP address**, and some hosts have several. That is why **Wait for Result** can run for minutes. Raise **Timeout (Minutes)**, or use **Start Only** and later **Get Status**.
 - SSL Labs limits how many assessments you may run at once (`maxAssessments`) and how quickly you may start new ones (`newAssessmentCoolOff`). The node respects both.
-- How the node handles errors:
+- Prefer **Use Cache** unless you really need a fresh scan. Cached reports are fast and don't use up assessment slots.
+
+How the action node handles HTTP errors from SSL Labs:
 
 | Status | Meaning | What the node does |
 |---|---|---|
-| **429** | Too many assessments | Waits and retries up to 3 times |
-| **503** | Maintenance | Waits a minute and retries twice, then fails with a clear message. SSL Labs recommends waiting 15–30 minutes before trying again. |
+| **429** | Too many assessments | Retries up to 3 times, waiting about 15, 30 and 45 seconds |
+| **503** | Maintenance | Retries twice, waiting about 1 and 2 minutes, then fails with a clear message. SSL Labs recommends waiting 15–30 minutes before trying again. |
 | **529** | Overloaded | Same as 503 |
-| **500** | Server error | Retried once |
+| **500** | Server error | Retried once after about 5 seconds. A call that started a new scan (`startNew`) is never repeated. |
 | **400** | Invalid parameters | Not retried |
+| **441** (or a 400 about the email) | Email not registered | Fails with *"Email is not registered with SSL Labs v4 — use the Register operation first"* |
 
-- Prefer **Use Cache** unless you really need a fresh scan. Cached reports are fast and don't use up assessment slots.
+Waits are randomized by ±25%. In **Wait for Result** mode, no retry wait runs past the timeout. The Register operation and the trigger do not retry.
+
+## Terms of use and privacy
+
+- SSL Labs APIs are free to use, subject to the [Qualys SSL Labs terms and conditions](https://www.ssllabs.com/about/terms.html). The API documentation says the spirit of the license is that operators test **their own** infrastructure. Read the full terms before you automate scans.
+- **Only assess hosts you own or are authorized to test.**
+- Assessments are carried out by Qualys's servers, not by your n8n instance. The hostnames you submit and your registered email are sent to Qualys.
+- Results are **not** published by default. Turning on **Publish Results** lists them on the public SSL Labs boards. <!-- TODO: verify whether unpublished results can still be viewed by others through the report URL -->
+- This project is unofficial and is not affiliated with, endorsed by, or supported by Qualys.
+
+## Security notes
+
+- Store your registered email in the **SSL Labs API** credential, not in node parameters, so it stays in n8n's encrypted credential store.
+- Use an `https://` Base URL. The node's operations and the trigger refuse any other URL, but the credential test does not check it, so an `http://` URL would send your email header in cleartext during the test.
+- Keep **Publish Results** off unless you intend to make a host's results public.
+- When you expose the on-demand webhook example, protect it (for example with webhook authentication) so others can't use your registration to scan arbitrary hosts.
 
 ## Compatibility
 
@@ -222,13 +277,42 @@ How the trigger behaves:
 - Node.js 24
 - No runtime dependencies
 
+## Development
+
+```bash
+git clone https://github.com/t0mer/n8n-nodes-ssllabs.git
+cd n8n-nodes-ssllabs
+npm ci
+npm run lint     # n8n-node lint
+npm run build    # n8n-node build → dist/
+npm test         # vitest, no calls to the real API
+npm run dev      # starts a local n8n with the nodes loaded
+```
+
+CI (`.github/workflows/ci.yml`) runs lint, build and tests on Node 24, then runs the n8n Creator Portal scanner on the source and the packed tarball (`scripts/scan-package.mjs`). Releases are published to npm with provenance by `.github/workflows/publish.yml` when a `YYYY.M.PATCH` tag is pushed; see the [changelog](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/CHANGELOG.md).
+
+Project layout:
+
+| Path | Contents |
+|---|---|
+| `credentials/` | The SSL Labs API credential |
+| `nodes/SslLabs/` | The action node and one module per resource |
+| `nodes/SslLabsTrigger/` | The polling trigger and its stored state |
+| `shared/` | Transport and retries, polling, batching, hostname parsing, grades and the summary mapper |
+| `test/` | Vitest tests and API fixtures |
+| `examples/` | Importable example workflows |
+
+## Contributing
+
+Issues and pull requests are welcome at [github.com/t0mer/n8n-nodes-ssllabs](https://github.com/t0mer/n8n-nodes-ssllabs/issues). Please run `npm run lint`, `npm run build` and `npm test` before opening a pull request, and never point tests at the live SSL Labs API.
+
 ## Resources
 
 - [SSL Labs API v4 documentation](https://github.com/ssllabs/ssllabs-scan/blob/master/ssllabs-api-docs-v4.md)
 - [SSL Labs API v4 announcement](https://notifications.qualys.com/api/2023/09/28/introduction-of-api-v4-for-qualys-ssllabs-and-deprecation-of-api-v3)
 - [SSL Labs Server Test](https://www.ssllabs.com/ssltest/)
-- [n8n community nodes documentation](https://docs.n8n.io/integrations/#community-nodes)
+- [n8n community nodes documentation](https://docs.n8n.io/integrations/community-nodes/)
 
 ## License
 
-[MIT](LICENSE)
+[MIT](https://github.com/t0mer/n8n-nodes-ssllabs/blob/main/LICENSE) © 2026 t0mer

package/dist/nodes/SslLabs/SslLabs.node.json

@@ -2,7 +2,7 @@
     "node": "@t0mer/n8n-nodes-ssllabs.sslLabs",
     "nodeVersion": "1.0",
     "codexVersion": "1.0",
-    "categories": ["Development", "Developer Tools"],
+    "categories": ["Development"],
     "resources": {
         "credentialDocumentation": [
             {

package/dist/nodes/SslLabsTrigger/SslLabsTrigger.node.json

@@ -2,7 +2,7 @@
     "node": "@t0mer/n8n-nodes-ssllabs.sslLabsTrigger",
     "nodeVersion": "1.0",
     "codexVersion": "1.0",
-    "categories": ["Development", "Developer Tools"],
+    "categories": ["Development"],
     "resources": {
         "credentialDocumentation": [
             {

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@t0mer/n8n-nodes-ssllabs",
-    "version": "2026.9.0",
-    "description": "n8n community node for the Qualys SSL Labs API v4: run SSL/TLS assessments, fetch grades, and watch for grade or certificate changes.",
+    "version": "2026.10.0",
+    "description": "n8n community nodes for the Qualys SSL Labs API v4: run SSL/TLS server assessments, get grades and certificate details, and get alerts on grade drops or expiring certificates.",
     "license": "MIT",
     "homepage": "https://github.com/t0mer/n8n-nodes-ssllabs#readme",
     "bugs": {
@@ -15,9 +15,13 @@
         "n8n-community-node-package",
         "n8n",
         "ssllabs",
+        "ssl-labs",
+        "qualys",
         "ssl",
         "tls",
+        "ssl-test",
         "certificate",
+        "certificate-monitoring",
         "security"
     ],
     "author": {