{"uid":"cap_S016MnQ-5gLWU06Y8rzNR","slug":"delx-commerce-security-headers-score-3c310344","name":"Delx Commerce — Security Headers Score","description":"Pay-per-result APIs for agents. No signup. Exact price. Verifiable delivery. USDC on Base + Solana via x402.","url":"https://commerce.delx.ai/api/v1/x402/security-headers-score?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"headers":{"type":"object","description":"Input field: headers."}}},"responseSchema":{"type":"json","example":{"score":40,"schema":"delx/util-security-headers-score/v1","missing":["permissions-policy","referrer-policy","x-content-type-options"],"present":["content-security-policy","strict-transport-security"],"advisory":"Header presence does not prove policy correctness."}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_KIcMg8sZ8XskDAhBPXPIz","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a set of HTTP response headers and returns a security score with details on which headers are present, missing, and advisory notes.","exampleAgentPrompt":"Can you score the security headers for my site? Here are the response headers it currently returns: Content-Security-Policy, Strict-Transport-Security, and X-Frame-Options — I want to know what's missing and how they rate overall.","exampleUseCases":[{"title":"Pre-launch security header audit","prompt":"Before I launch my new web app, can you check these HTTP response headers and tell me which security headers are missing and what score they get? Headers are: Content-Security-Policy, X-Frame-Options, Strict-Transport-Security."},{"title":"CI pipeline header compliance check","prompt":"I want to validate the security headers in my staging environment after each deploy. Here are the response headers from our latest build — score them and flag anything missing like Permissions-Policy or Referrer-Policy."},{"title":"Client site security report","prompt":"I'm auditing a client's website and need a security score for their response headers. The site returns these headers: Strict-Transport-Security, X-Content-Type-Options, and Content-Security-Policy — what are they missing and how does it rank?"}],"resultDescription":"Returns a JSON object containing a numeric security score (0–100), a list of security headers that are present, a list of headers that are missing, a schema version identifier, and an advisory note warning that header presence does not guarantee correct policy configuration.","failureModes":["Missing or empty 'headers' field returns a validation error or zero score","Malformed header values may be accepted but scored poorly","No network-level fetch performed — only analyzes headers supplied by the caller","Payment failure or insufficient USDC balance results in HTTP 402 and no result"],"whenToPreferThis":"Choose this endpoint when you need a quick, structured, pay-per-result security score for a specific set of HTTP response headers without standing up a full security scanner. Ideal for CI/CD pipelines, agent-driven audits, or lightweight compliance checks where a numeric score and missing-header list are sufficient. Prefer alternatives if you need full OWASP ZAP-level scanning, cookie attribute analysis, or TLS certificate inspection.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-01T00:53:47.042Z","isFirstParty":false,"canonicalSlug":"delx-commerce-security-headers-score-3c310344"}