{"uid":"cap_JBZgaKweCto1G2B39CnUS","slug":"agentstoolshub-http-security-headers-grader-5ef2f0de","name":"AgentsToolsHub HTTP Security Headers Grader","description":"Fetch a URL and grade its HTTP security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and COOP/CORP. Returns a 0–100 score, a letter grade, and a concrete recommendation for every missing header. Use this when an agent needs to grade a site's HTTP security headers + fix hints.","url":"https://agentstoolshub.com/api/v1/security/security-headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"URL or domain"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_71m5gKYrpL1_4S76qj4Z4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches a URL and grades its HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP), returning a 0–100 score, a letter grade, and actionable fix recommendations for each missing header.","exampleAgentPrompt":"Can you check the HTTP security headers for https://mycompany.com and give me a score, a letter grade, and tell me exactly which headers are missing and how to fix them?","exampleUseCases":[{"title":"Pre-launch security header audit","prompt":"We're about to launch our new SaaS product at app.launchpad.io — can you scan its HTTP security headers, give it a grade, and tell us what we need to fix before we go live?"},{"title":"Competitor security posture check","prompt":"I want to know how well our competitor's site stripe.com does on HTTP security headers — what's their score and letter grade, and are they missing anything important like CSP or HSTS?"},{"title":"Recurring compliance header check","prompt":"Can you audit the security headers on https://portal.healthapp.com and list every missing header with a concrete recommendation so our DevOps team knows what to add?"}],"resultDescription":"Returns a numeric score from 0 to 100, a letter grade (e.g. A, B, C, D, F), and for each of the key HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, CORP) — whether it is present, its current value if set, and a concrete remediation recommendation if it is missing or misconfigured.","failureModes":["Invalid or unreachable URL returns an error response","Private/internal IP addresses blocked by SSRF guard","Malformed URL input causes validation failure","Target site returns non-HTTP response (e.g. DNS failure)","Rate limit exceeded for the API key"],"whenToPreferThis":"Choose this endpoint when you need a fast, structured, scored audit of a specific website's HTTP security headers with actionable fix recommendations — especially useful in DevSecOps pipelines, pre-launch checklists, compliance audits, or when evaluating third-party sites. Prefer this over a generic HTTP request when you want graded analysis rather than raw header values.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:40:46.859Z","isFirstParty":false,"canonicalSlug":"agentstoolshub-http-security-headers-grader-5ef2f0de"}