{"uid":"cap_A4fhztHRP1kQi5TZvHKF_","slug":"lookproof-csp-parser-d7a1855c","name":"Lookproof CSP Parser","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/http/csp-parse?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"header":{"type":"string","title":"Header","maxLength":8192,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0lxXvah7CF9kkapDejD6V","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses a Content-Security-Policy header value offline, identifying directives, sources, unsafe flags, wildcards, and missing critical entries per CSP Level 3.","exampleAgentPrompt":"Can you parse this CSP header for me and flag anything unsafe or missing — like unsafe-inline, wildcard script sources, or missing default-src, object-src, or base-uri: \"default-src 'self'; script-src 'self' 'unsafe-inline' https:; object-src 'none'\"?","exampleUseCases":[{"title":"Pre-deploy CSP security review","prompt":"Before I push this to production, can you parse this Content-Security-Policy and tell me if there's anything dangerous or missing — like unsafe-inline, unsafe-eval, wildcard sources, or absent base-uri: \"default-src 'self'; script-src * 'unsafe-eval'; img-src 'self' data:\"?"},{"title":"Audit report-only CSP policy","prompt":"I've got a report-only CSP I want to review before making it enforced — can you parse it and highlight any gaps like missing object-src or overly permissive sources: \"Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline'\"?"},{"title":"CI pipeline CSP validation step","prompt":"As part of our deployment check, parse this CSP string and flag any issues including missing default-src, wildcard or scheme-only script sources, and unsafe flags: \"script-src https: 'unsafe-inline'; style-src 'self'\"?"}],"resultDescription":"A structured breakdown of the parsed CSP including: each directive and its sources, presence of unsafe-inline and unsafe-eval, wildcard and scheme-only sources in script or plugin directives, which critical directives (default-src, object-src, base-uri) are missing, and whether the policy is in report-only mode.","failureModes":["Empty or missing header field returns a validation error","Header exceeding 8192 characters is rejected","Malformed JSON input returns a 400-level error","Completely blank CSP string returns a parse error"],"whenToPreferThis":"Choose this endpoint when you need offline, deterministic, standards-accurate CSP Level 3 parsing without making live DNS or network requests. It is ideal for CI/CD pipelines, security review workflows, or any agent that writes or audits CSP headers before deployment. Prefer it over a generic security scanner when you specifically need structured directive-by-directive CSP analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:23.952Z","isFirstParty":false,"canonicalSlug":"lookproof-csp-parser-d7a1855c"}