{"uid":"cap_5bmxy4rSmrHrXAow2XMRC","slug":"exposure-scan-5117a22f","name":"Exposure Scan","description":"nuclei exposure/misconfig scan of a public host for weak TLS, open services and misconfigurations.","url":"https://k2so.wrong.systems/api/services/exposure-scan","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"meta":{"enum":["0","1"],"type":"string","description":"Set to 1 for free metadata JSON (no payment required)"},"domain":{"type":"string","description":"Composite input parameter"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","title":"Exposure Scan paid response","$schema":"https://json-schema.org/draft/2020-12/schema","required":["ok","paid","service","provider","result"],"properties":{"ok":{"type":"boolean"},"paid":{"type":"boolean"},"result":{"type":"object","required":["ok","service"],"properties":{"ok":{"type":"boolean","description":"Handler success"},"score":{"type":"number"},"service":{"type":"string","description":"Service slug"},"summary":{"type":"string"},"evidence":{"type":"object"},"strengths":{"type":"array","items":{"type":"string"}},"confidence":{"type":"string"},"generatedAt":{"type":"string","description":"ISO-8601 timestamp"},"riskFactors":{"type":"array","items":{"type":"string"}}}},"payment":{"type":"object","properties":{"code":{"type":"string"},"payer":{"type":"string"},"detail":{"type":"string"},"selfPay":{"type":"boolean"},"transaction":{"type":"string"}}},"service":{"type":"string"},"provider":{"type":"string","const":"K-2SO"}}}}}}},"responseSchema":{"type":"json","example":{"ok":true,"paid":true,"result":{"ok":true,"service":"exposure-scan"},"service":"exposure-scan","provider":"K-2SO"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_K27NUc3Gg0bJYIMsFsrkQ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs a Nuclei-based exposure and misconfiguration scan on a public host, checking for weak TLS, open services, and security misconfigurations.","exampleAgentPrompt":"Can you run an exposure scan on api.example.com to check for weak TLS, open services, and any security misconfigurations?","exampleUseCases":[{"title":"Pre-launch security check for new API","prompt":"Before we go live, can you scan staging.myapp.io for any exposed services, weak TLS settings, or misconfigurations I should fix?"},{"title":"Third-party vendor risk assessment","prompt":"I need to assess the security posture of vendor-portal.thirdparty.com — can you check it for open services, TLS weaknesses, and known misconfigs?"},{"title":"Routine exposure audit for production host","prompt":"Run a security exposure scan on prod.myservice.net and give me a risk score along with any risk factors or misconfigurations found."}],"resultDescription":"Returns a JSON object with a boolean success indicator, a risk score (numeric), a human-readable summary, a list of risk factors, a list of strengths, a confidence level, an evidence object with detailed findings, a timestamp, and payment metadata. Together these describe the host's exposure posture including TLS weaknesses, open services, and misconfigurations detected by Nuclei templates.","failureModes":["Invalid or non-public domain returns an error or empty result","Host unreachable or firewalled may result in incomplete scan data","Payment not processed results in 402 response without scan results","Malformed domain parameter causes request rejection","Scan timeout on slow-responding hosts may reduce evidence coverage"],"whenToPreferThis":"Choose this endpoint when you need a fast, automated Nuclei-based security scan of a single public host covering TLS configuration, open/exposed services, and common misconfigurations — especially in agentic workflows that use x402 micropayment flows. Prefer it over manual scanning tools when you need a structured JSON result with a risk score and evidence for downstream reasoning or reporting.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T16:25:12.546Z","isFirstParty":false}