{"uid":"cap_3G9b8YOB8FVC-hioM4i16","slug":"x-content-type-options-header-check-b7bb89a9","name":"X-Content-Type-Options Header Check","description":"X Content Type Options Check: X Content Type Options Check checks whether X-Content-Type-Options is exactly nosniff from bounded caller-supplied values without an external provider. Call X Content Type Options Check before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for X Content Type Options Check as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base. F…","url":"https://api.delx.ai/api/v1/x402/x-content-type-options-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"value":{"type":"string","maxLength":8192,"description":"Value supplied to X Content Type Options Check; used only for this bounded calculation and processed in memory without retention."}}},"responseSchema":{"type":"json","example":{"result":{"value":"nosniff","accepted":true},"schema":"delx/util-x-content-type-options-check/v1","status":"pass","evidence":{"retained":false,"input_sha256":"bea2556c6cc6e1b92f986ac1504063041a0fbd184228061905e268ef7eeebd31","external_calls":0},"operation":"web_reliability:x_content_type_options_check"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XDYm3Q6aXRWw-UCgjGSye","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates whether an HTTP response's X-Content-Type-Options header is exactly 'nosniff', returning a deterministic pass/advisory finding as versioned JSON.","exampleAgentPrompt":"Check whether this HTTP header value passes the X-Content-Type-Options nosniff requirement: 'nosniff'.","exampleUseCases":[{"title":"Security header audit before caching","prompt":"Before I cache this web response, check if its X-Content-Type-Options header value 'nosniff' passes the required security check."},{"title":"Validate headers in agent web pipeline","prompt":"My agent just fetched a web page and got this X-Content-Type-Options header value: 'text/html'. Does it pass the nosniff check?"},{"title":"Pre-redirect security compliance check","prompt":"I'm about to redirect users through this response — can you verify the X-Content-Type-Options header value 'NOSNIFF' actually meets the nosniff requirement?"}],"resultDescription":"Returns a versioned deterministic JSON object containing: the normalized input header evidence, a computed finding describing whether the value matches exactly 'nosniff', and an explicit pass or advisory status indicating compliance with X-Content-Type-Options security requirements.","failureModes":["Empty or missing value field returns advisory/fail status","Header value with incorrect casing (e.g. 'Nosniff') may trigger advisory depending on normalization","Value exceeding 8192 characters may be rejected","Malformed JSON input returns validation error","Any value other than exact 'nosniff' results in advisory finding"],"whenToPreferThis":"Use this endpoint when an AI agent or automated pipeline needs a deterministic, auditable, versioned record of whether an HTTP response's X-Content-Type-Options header is correctly set before taking actions such as caching, redirecting, retrying, or accepting the response. Prefer this over custom logic when you need consistent normalized evidence and explicit pass/advisory classification without writing your own header parsing.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T06:56:11.897Z","isFirstParty":false,"canonicalSlug":"x-content-type-options-header-check-b7bb89a9"}