{"uid":"cap_GgMTj-86_jUMpDtf-CqmB","slug":"header-semantics-audit-08577b6d","name":"Header Semantics Audit","description":"Header semantics audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.","url":"https://agentreadiness.halowerk.com/v1/header-semantics-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"target":{"type":"string","maxLength":2048,"minLength":3,"description":"Public HTTP(S) URL or domain to inspect. A bare domain is normalized to HTTPS."},"context":{"type":"object","description":"Optional non-secret correlation labels returned unchanged only in the request lifecycle.","maxProperties":12,"additionalProperties":{"type":["string","number","boolean","null"]}},"baseline":{"type":["object","null"],"description":"Optional baseline returned by a previous snapshot call.","additionalProperties":true},"compare_url":{"type":"string","maxLength":2048,"minLength":3,"description":"Optional public comparison URL. Used by change and monitoring services."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_OIVCZ5L4JDabzGG1mt5kR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Passively fetches and audits a public URL's HTTP header semantics to evaluate AI agent readiness, returning observations, verdicts, evidence sources, and recommended actions.","exampleAgentPrompt":"Can you do a passive header semantics audit on https://example.com and tell me whether its HTTP headers are properly configured for AI agent access — I want to see the verdict, what evidence was found, and what action I should take?","exampleUseCases":[{"title":"Pre-launch agent readiness check","prompt":"Before we launch our new API product at api.mycompany.com, can you audit its HTTP header semantics and tell me if they're set up correctly for AI agents to access — give me the verdict and any recommended fixes?"},{"title":"Diagnosing bot access issues","prompt":"Our site at blog.acmecorp.com seems to be blocking some AI crawlers — can you run a header semantics audit on it and show me the evidence and any limitations you find?"},{"title":"Comparing two sites' header configurations","prompt":"Can you audit the header semantics on docs.serviceA.com and compare it against docs.serviceB.com to see which one is better configured for agent readiness?"}],"resultDescription":"Returns a structured result containing the observation (what was found in the headers), the evaluated threshold, a pass/fail verdict, the exact evidence source (e.g. specific header names and values), known limitations of the passive check, and a mode-specific recommended action. No authentication, payload injection, or form submission is performed.","failureModes":["Target URL is unreachable or returns non-2xx status, resulting in an error or inconclusive verdict","Supplied URL is malformed or too short (minLength 3), triggering a validation error","Target uses auth-gated headers not visible without login, leading to incomplete evidence","Rate limiting or network timeouts on the target side may cause partial results","Comparison URL unreachable when compare_url is provided, preventing diff analysis"],"whenToPreferThis":"Choose this endpoint when you need a passive, non-invasive audit of HTTP response header semantics specifically for AI agent readiness assessment. It is ideal for developers or site owners who want to verify that their public-facing web properties expose correct headers for bot and agent access without triggering any login attempts, payload injections, or load tests. Prefer this over generic header-checking tools when the evaluation criterion is agent-readiness and you need a structured verdict with evidence and actionable guidance.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T00:35:13.937Z","isFirstParty":false,"canonicalSlug":"header-semantics-audit-08577b6d"}