Mixed Content Checker

Find insecure http:// resources loaded on an HTTPS page — the "mixed content" that browsers block and that breaks the padlock. One call, no API key, pay per URL.

▶ Live on the Apify Store: https://apify.com/eliai/mixed-content-checker — run it instantly, or call it as an agent tool via Apify MCP.

What it does

• Fetches the page and scans every resource reference — img, script, link, iframe, source, video, audio, and CSS url()
• Flags any loaded over insecure http:// while the page is HTTPS
• Returns the list of offending resources (with type) + issues

Input

{ "url": "https://example.com" }

or bulk:

{ "urls": ["https://a.com", "https://b.com"], "maxUrls": 25 }

Output (per URL)

{
  "url": "https://example.com",
  "https": true,
  "mixedContentCount": 2,
  "mixedContent": [{ "type": "img", "url": "http://example.com/logo.png" }],
  "issues": ["2 insecure http:// resource(s) on an HTTPS page — browsers block/warn (mixed content)"],
  "summary": "2 mixed-content resource(s)"
}

Use cases

Security/SSL audits, pre-launch checks, and fixing the broken-padlock warning — by hand or wired into an agent/CI. Pairs with our HTTP Security Headers Checker.