{"uid":"cap_GBlnbiln_nwq3uCVQC8Wi","slug":"bulk-security-headers-grader-ce044080","name":"Bulk Security Headers Grader","description":"Bulk security-header grade for up to 10 URLs in one call: each URL gets an A-F grade from HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and server-version exposure, with the specific missing headers, sorted worst-first. Vendor sweeps and portfolio audits. $0.01 per batch.","url":"https://intel.rallylive.ca/monitor/bulk-security","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_h6dRmv3blgNqRFea07lCR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Grades up to 10 URLs on their HTTP security headers (HSTS, CSP, X-Frame-Options, etc.), returning an A–F score and list of missing headers per URL, sorted worst-first.","exampleAgentPrompt":"Can you grade the security headers on these five sites — example.com, shopify.com, stripe.com, acme.io, and vendor-xyz.com — and tell me which ones are missing HSTS or CSP, ranked from worst to best?","exampleUseCases":[{"title":"Vendor security sweep before onboarding","prompt":"I'm onboarding 8 new SaaS vendors. Can you check their security headers and give me an A–F grade for each, flagging any that are missing HSTS, CSP, or X-Frame-Options?"},{"title":"Portfolio audit for a web agency","prompt":"We manage about 10 client websites. Can you run a security header audit across all of them and sort the results from worst to best so I know which ones to fix first?"},{"title":"Pre-launch security header check","prompt":"Before we launch, can you check the security headers on staging.acme.io and acme.io and tell me which headers we're still missing and what grade each gets?"}],"resultDescription":"For each submitted URL, the agent receives an A–F security grade, a list of missing or misconfigured headers (from HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and server-version exposure), and results sorted worst-first so the highest-risk URLs are surfaced at the top.","failureModes":["Unreachable URL returns an error or no-grade for that entry","More than 10 URLs submitted may be rejected or truncated","Misconfigured input schema (non-HTTP URLs, typos) causes partial failures","Server that blocks automated requests may return misleading header absence","Dynamic pages with server-side header injection may not reflect actual browser-received headers"],"whenToPreferThis":"Choose this endpoint when you need to audit HTTP security headers across multiple URLs in a single call without building your own header-fetching pipeline. It is especially suited for vendor sweeps, agency portfolio audits, and pre-launch checklists where you want a human-readable A–F grade and a prioritized list of missing headers. Prefer it over single-URL checkers when comparing several domains at once or when the sorted worst-first ranking is useful for triage.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:13:22.420Z","isFirstParty":false}