{"uid":"cap_Jez5Pn5w-f14KFhC-QqY8","slug":"swift-bot-labs-toolbox-web-http-headers-checker-704eddd8","name":"Swift Bot Labs Toolbox – Web HTTP Headers Checker","description":"62 small, deterministic utility APIs (DNS and e-mail checks, web extraction, EVM decoding, x402 checks, IP math, JSON/CSV, hashing, conversions). No account or API key: pay per call in USDC with x402.","url":"https://x402-toolbox.swiftbotlab.workers.dev/v1/web/headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD"],"type":"string"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string"},"method":{"enum":["HEAD","GET"],"type":"string"}},"additionalProperties":false},"discoverable":{"type":"boolean"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ok":true,"tool":"web-headers","result":{"ms":180,"url":"https://github.com/","status":200,"security":{"grade":"A","missing":[],"present":["strict-transport-security","content-security-policy"]},"redirects":[{"to":"https://github.com/","from":"http://github.com/","status":301}]}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ycAIFVC95gJHpKJ87BR0k","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches HTTP response headers for a given URL and grades its security header configuration, including redirect chain and response time.","exampleAgentPrompt":"Can you check the HTTP headers for https://mycompany.com using a GET request and tell me what security headers are present, which ones are missing, and what security grade it gets?","exampleUseCases":[{"title":"Security audit before launch","prompt":"Before we launch the new site at https://staging.acme.com, can you fetch its HTTP headers with a GET request and tell me our security grade plus any missing headers like CSP or HSTS?"},{"title":"Verify redirect chain for SEO","prompt":"Can you check https://acme.com with a GET request and show me the full redirect chain, including any HTTP-to-HTTPS redirects and the final destination URL?"},{"title":"Monitor competitor security posture","prompt":"Fetch the HTTP headers from https://competitor.io using a HEAD request and let me know what security headers they have set and how they grade overall."}],"resultDescription":"Returns a JSON object with: the tool name ('web-headers'), response time in milliseconds, final URL, HTTP status code, a security grade (letter, e.g. 'A'), lists of present and missing security headers, and an array of redirect hops (each with from/to URL and status code).","failureModes":["Invalid or unreachable URL returns an error or non-200 status","Timeout if the target server is slow to respond","Private/internal URLs (e.g. localhost) may be blocked or return no result","Payment not accepted results in HTTP 402 before the tool executes","Missing required 'url' query parameter causes a validation error"],"whenToPreferThis":"Choose this endpoint when you need a quick, deterministic, pay-per-call check of a URL's HTTP response headers and security posture without setting up an account. Ideal for one-off audits, pre-launch security checks, or automated pipelines that need header data on demand. Prefer this over browser-based DevTools or full crawlers when you only need headers and redirect info, not page content.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:54.794Z","isFirstParty":false,"canonicalSlug":"swift-bot-labs-toolbox-web-http-headers-checker-704eddd8"}