{"uid":"cap_8b2v_jcxM8FZvl8J6ELCy","slug":"cookie-security-check-de5e288b","name":"Cookie Security Check","description":"Cookie Security Check: Cookie Security Check checks Secure, HttpOnly, and SameSite attributes against policy from bounded caller-supplied values without an external provider. Call Cookie Security Check before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for Cookie Security Check as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base. First-party, stateless…","url":"https://api.delx.ai/api/v1/x402/cookie-security-check","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"header":{"type":"string","maxLength":8192,"description":"Header supplied to Cookie Security Check; used only for this bounded calculation and processed in memory without retention."},"require_secure":{"type":"boolean","description":"Require Secure supplied to Cookie Security Check; used only for this bounded calculation and processed in memory without retention."},"allowed_same_site":{"type":"array","items":{"type":"string","maxLength":8192},"maxItems":256,"description":"Allowed Same Site supplied to Cookie Security Check; used only for this bounded calculation and processed in memory without retention."},"require_http_only":{"type":"boolean","description":"Require HTTP Only supplied to Cookie Security Check; used only for this bounded calculation and processed in memory without retention."}}},"responseSchema":{"type":"json","example":{"result":{"name":"sid","attributes":{"path":"/","secure":true,"httponly":true,"samesite":"Lax"},"value_length":3,"secure_policy_passed":true},"schema":"delx/util-cookie-security-check/v1","status":"pass","evidence":{"retained":false,"input_sha256":"b2535750ee2a8d64e7fa26e4f6b035b8925174e765e5275f7a364bd9d4e021dc","external_calls":0},"operation":"web_reliability:cookie_security_check"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ZhJSlVvUc-ppTLpO8sD5M","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates cookie security attributes (Secure, HttpOnly, SameSite) against a caller-defined policy and returns a deterministic pass/advisory verdict","exampleAgentPrompt":"Check this Set-Cookie header for security compliance — require the Secure and HttpOnly flags to be set, and only allow SameSite values of 'Strict' or 'Lax': 'session=abc123; Path=/; HttpOnly; SameSite=Strict'","exampleUseCases":[{"title":"Pre-cache cookie policy gate","prompt":"Before I cache this web response, validate the Set-Cookie header 'auth=xyz; Secure; HttpOnly; SameSite=None' — I require Secure and HttpOnly to be set, and SameSite must be either 'Strict' or 'Lax', not 'None'."},{"title":"Third-party API response audit","prompt":"I just got a response from an external API and the Set-Cookie header is 'token=abc; Path=/; SameSite=Lax'. Check whether it passes my policy: Secure is required, HttpOnly is required, and only Strict or Lax are acceptable SameSite values."},{"title":"Redirect safety check for cookies","prompt":"Before I follow this redirect, can you validate the cookie in the response header 'sid=def456; Secure; SameSite=Strict' against a policy that requires Secure but does not require HttpOnly, and allows any SameSite value?"}],"resultDescription":"Returns versioned deterministic JSON containing: normalized evidence extracted from the Set-Cookie header (Secure, HttpOnly, SameSite attribute values), a computed security finding describing any policy violations, and an explicit pass or advisory status indicating whether the cookie meets the caller-supplied policy requirements.","failureModes":["Malformed or missing Set-Cookie header may result in parsing errors or incomplete evidence","Header exceeding 8192 character limit will be rejected","Invalid or unsupported SameSite values in allowed_same_site list may produce unexpected advisory results","Boolean fields (require_secure, require_http_only) omitted default to unchecked policy — may produce lenient results if not explicitly set"],"whenToPreferThis":"Choose this endpoint when you need a lightweight, stateless, deterministic validation of cookie security attributes against a caller-defined policy — without any external dependencies or data retention. Ideal for agents that must gate on cookie compliance before caching, redirecting, retrying, or accepting a web response. Prefer this over custom parsing logic when you need normalized evidence and an explicit pass/advisory verdict in a consistent JSON format.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T01:15:45.265Z","isFirstParty":false}