Use when you need an http security headers audit of a website or URL, with a gra
Use when you need an http security headers audit of a website or URL, with a grade and what to fix. Do not use for vulnerability scans, TLS cipher analysis or pages behind a login. Returns JSON auditing the HTTP security headers of a public URL (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookies) with a grade and fixes for 0.007 USDC per call. Typical response time 2500 ms (p95). Category: Infrastructure.
Answeringour last check, 2026-10-18
1 of 1checks answered this week
1104 msmedian answer time
$0.007listed price per call
$0.007price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://x402-gateway.blackwoodstate8.workers.dev/v1/http-headers
| Category | Code and developer |
|---|---|
| Provider host | x402-gateway.blackwoodstate8.workers.dev |
| Networks | eip155:8453 |
| Payment schemes | exact, upto |
| Self-reported calls, 30 days | 4 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-18 | valid payment request | 402 | $0.007 | 1104 ms |
Example input (from the provider)
{
"body": {
"url": "https://example.com"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"url": {
"description": "Public http(s) URL to audit, e.g. https://example.com",
"maxLength": 2048,
"minLength": 8,
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"checkedAt": {
"type": "string"
},
"checks": {
"items": {
"additionalProperties": false,
"properties": {
"advice": {
"type": "string"
},
"header": {
"type": "string"
},
"result": {
"enum": [
"pass",
"warn",
"fail",
"info"
],
"type": "string"
},
"value": {
"type": [
"string",
"null"
]
}
},
"required": [
"header",
"result",
"value",
"advice"
],
"type": "object"
},
"type": "array"
},
"cookies": {
"items": {
"additionalProperties": false,
"properties": {
"httpOnly": {
"type": "boolean"
},
"name": {
"type": "string"
},
"sameSite": {
"type": [
"string",
"null"
]
},
"secure": {
"type": "boolean"
}
},
"required": [
"name",
"secure",
"httpOnly",
"sameSite"
],
"type": "object"
},
"type": "array"
},
"finalUrl": {
"type": "string"
},
"grade": {
"type": "string"
},
"next": {
"additionalProperties": false,
"description": "Suggested next paid call in the same family (call it in a loop when the task continues)",
"properties": {
"method": {
"enum": [
"GET",
"POST"
],
"type": "string"
},
"sample": {
"description": "Free fixed sample of the whole family",
"type": "string"
},
"service": {
"description": "Service id of the suggested next paid call",
"type": "string"
},
"tool": {
"description": "MCP tool name of the same call",
"type": "string"
},
"url": {
"description": "Paid route of the next call",
"type": "string"
},
"useWhen": {
"description": "When the next call is the right one",
"type": "string"
}
},
"required": [
"service",
"tool",
"method",
"url",
"useWhen",
"sample"
],
"type": "object"
},
"redirects": {
"type": "number"
},
"score": {
"type": "number"
},
"status": {
"type": "number"
},
"url": {
"type": "string"
}
},
"required": [
"url",
"finalUrl",
"status",
"redirects",
"grade",
"score",
"checks",
"cookies",
"checkedAt"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}