{"uid":"cap_8WPFUIE3cQj4xUEwzpXSs","slug":"http-methods-check-293fd689","name":"HTTP Methods Check","description":"HTTP methods check: which methods a URL accepts, from an OPTIONS request (Allow / Access-Control-Allow-Methods) plus HEAD, GET and a harmless POST probe, with status codes. API and security reconnaissance. $0.01 per URL.","url":"https://intel.rallylive.ca/site/http-methods","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8M0Tx_W5q5cpEOFKSjwch","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Probes a URL to discover which HTTP methods it accepts via OPTIONS, HEAD, GET, and a harmless POST, returning allowed methods and status codes for API and security reconnaissance.","exampleAgentPrompt":"Can you check what HTTP methods are accepted by https://api.example.com/users — I want to know if it allows GET, POST, DELETE, and OPTIONS?","exampleUseCases":[{"title":"API security audit before pen test","prompt":"Before I start my security assessment, can you probe https://api.targetsite.com/admin and tell me every HTTP method it accepts, including any that might be unexpectedly allowed like DELETE or TRACE?"},{"title":"Verify REST endpoint supports PUT","prompt":"I'm integrating with a third-party API at https://partner.example.com/v2/orders — can you check whether it accepts PUT and PATCH requests or just GET and POST?"},{"title":"CORS preflight method discovery","prompt":"I need to know what methods the Access-Control-Allow-Methods header exposes on https://service.myapp.io/api/data — can you run an OPTIONS probe and show me the full list with status codes?"}],"resultDescription":"Returns the HTTP methods accepted by the target URL, derived from an OPTIONS request (parsing Allow and Access-Control-Allow-Methods headers), plus results from HEAD, GET, and a harmless POST probe — each with their HTTP status codes.","failureModes":["URL is unreachable or times out — no method data returned","Server does not implement OPTIONS, returning 405 or empty Allow header","URL returns 403 or 401 blocking all probes","Invalid or malformed URL input causes request failure","Some servers block automated probes via WAF or rate limiting"],"whenToPreferThis":"Use this endpoint when you need to quickly enumerate which HTTP methods a URL supports without manual tooling — ideal for API integration checks, security reconnaissance, or verifying REST compliance. Prefer it over general web scrapers or DNS tools when the specific question is about HTTP verb support and CORS method exposure.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:13:40.286Z","isFirstParty":false}