{"slug":"api-mekler-ai-v1-web-headers-check-security-policy-f8e5ee","title":"Inspect one public URL for observed security headers and cross-origin configurat","host":"api.mekler.ai","method":"POST","resource":"https://api.mekler.ai/v1/web/headers/check-security-policy","category":"other","description":"Inspect one public URL for observed security headers and cross-origin configuration. Send passive GET and credential-free OPTIONS with a supplied origin, requested method and optional header names; return exact selected headers and evidence-linked findings. No authorization/cookies, exploit attempts","price_listed":0.005,"price_asked":null,"state":"effects","state_label":"Not tested: has real-world effects","checks_7d":0,"answered_7d":0,"latency_ms_median":null,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"origin":"https://mekler.ai","request_headers":[],"request_id":"http-security-example-001","requested_method":"GET","url":"https://mekler.ai/"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"origin":{"default":"https://mekler.ai","maxLength":2048,"type":"string"},"request_headers":{"default":[],"items":{"pattern":"^[a-z0-9-]{1,64}$","type":"string"},"maxItems":20,"type":"array"},"request_id":{"pattern":"^[A-Za-z0-9_-]{16,64}$","type":"string"},"requested_method":{"default":"GET","enum":["GET","HEAD","POST","PUT","PATCH","DELETE"],"type":"string"},"url":{"maxLength":2048,"type":"string"}},"required":["url","request_id"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"additionalProperties":false,"properties":{"findings":{"items":{"additionalProperties":false,"properties":{"code":{"type":"string"},"evidence":{"type":"string"},"recommendation":{"type":"string"},"severity":{"type":"string"}},"required":["code","severity","evidence","recommendation"],"type":"object"},"type":"array"},"http_status":{"type":"integer"},"limitations":{"items":{"type":"string"},"type":"array"},"observed_at":{"type":"string"},"origin":{"type":"string"},"preflight":{"additionalProperties":false,"properties":{"headers":{"additionalProperties":{"type":"string"},"maxProperties":20,"type":"object"},"http_status":{"type":"integer"},"url":{"type":"string"}},"required":["http_status","url","headers"],"type":"object"},"request_headers":{"items":{"type":"string"},"type":"array"},"requested_method":{"type":"string"},"response_headers":{"additionalProperties":{"type":"string"},"maxProperties":20,"type":"object"},"status":{"type":"string"},"url":{"type":"string"}},"required":["status","url","observed_at","http_status","origin","requested_method","request_headers","response_headers","preflight","findings","limitations"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[],"description_full":"Inspect one public URL for observed security headers and cross-origin configuration. Send passive GET and credential-free OPTIONS with a supplied origin, requested method and optional header names; return exact selected headers and evidence-linked findings. No authorization/cookies, exploit attempts, state-changing requests, browser enforcement guarantee or full CSP/TLS analysis.","last_updated":"2026-10-20T14:34:06.021Z","schemes":["exact"]}