{"slug":"api-zfinia-com-x402-v1-cookie-attribute-audit-4dbb47","title":"Parse Set-Cookie headers and report their attributes","host":"api.zfinia.com","method":"POST","resource":"https://api.zfinia.com/x402/v1/cookie-attribute-audit","category":"code","description":"Parse Set-Cookie headers and report their attributes. Names cookies with no Secure, no HttpOnly or no SameSite; SameSite=None without Secure, which browsers reject so the cookie is never set at all; an unrecognised SameSite value, where the default applies instead; a lifetime beyond a stated maximum","price_listed":0.12,"price_asked":0.12,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":2653,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"contract":{"expected_domain":"example.test","max_age_seconds":86400,"require_http_only":true,"require_same_site":true,"require_secure":true},"set_cookie":["session=abc123; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=86400","analytics_id=zz; Path=/; Domain=.example.test; Max-Age=31536000","embed_state=1; Path=/; SameSite=None","legacy=1; Path=/; Secure; HttpOnly; SameSite=Lax; Max-Age=63072000"]},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"contract":{"additionalProperties":false,"properties":{"expected_domain":{"maxLength":256,"type":"string"},"forbid_same_site_none":{"type":"boolean"},"max_age_seconds":{"minimum":0,"type":"number"},"require_http_only":{"type":"boolean"},"require_same_site":{"type":"boolean"},"require_secure":{"type":"boolean"}},"type":"object"},"set_cookie":{"items":{"maxLength":8192,"type":"string"},"maxItems":100,"minItems":1,"type":"array"}},"required":["set_cookie"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-04","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.12,"price_match":true,"latency_ms":2653,"error":null}],"description_full":"Parse Set-Cookie headers and report their attributes. Names cookies with no Secure, no HttpOnly or no SameSite; SameSite=None without Secure, which browsers reject so the cookie is never set at all; an unrecognised SameSite value, where the default applies instead; a lifetime beyond a stated maximum; an unexpected Domain; and a Domain attribute at all, which widens a cookie to every subdomain. No cookie value is returned, only its length.","last_updated":"2026-10-04T08:17:38.943Z","schemes":["exact"]}