{"uid":"cap_VnLeckhKDLHinzBjhGHEp","slug":"website-security-headers-audit-50915a49","name":"Website Security Headers Audit","description":"Website security-headers audit with A-F grade, cookie flags and version leaks — Genesis402 / UnyKorn Operator Network","url":"https://twin.unykorn.org/web/headers-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"params":{"type":"object","properties":{"url":{"type":"string","description":"required public URL"}}}}},"responseSchema":{"type":"json","example":{"ok":true,"type":"http-headers-audit","receipt":{"tx_hash":"0x<64hex>","amount_usd":0.002,"receipt_id":"g402-<16hex>"},"sources":[{"ok":true,"name":"<source>"}],"limitations":"<text>","generated_at":"<iso time>","evidence_hash":"sha256:<64hex>"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_aC8CTFeDWmXQ0limq4e6p","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a public website's HTTP security headers, returning an A-F grade, cookie flag analysis, and version-leak detection","exampleAgentPrompt":"Can you audit the security headers for https://example.com and tell me what grade it gets, whether the cookies have the right flags set, and if it's leaking any version or server info?","exampleUseCases":[{"title":"Pre-launch security checklist","prompt":"Before we go live, can you check the security headers on https://staging.myapp.io and tell me the overall grade plus any missing headers or version leaks I need to fix?"},{"title":"Competitor security benchmarking","prompt":"Run a security header audit on https://www.competitor.com — I want to see their A-F grade, cookie flag status, and whether they're leaking any software versions."},{"title":"Compliance review for client site","prompt":"I need to audit https://clientportal.example.org for security headers — give me the grade, flag any cookies missing HttpOnly or Secure flags, and flag any version information being exposed in headers."}],"resultDescription":"Returns an A-F security grade for the target website's HTTP headers, a breakdown of individual security headers (present, missing, or misconfigured), an analysis of cookie flags (HttpOnly, Secure, SameSite), and detection of version or software information leaked via headers like Server or X-Powered-By.","failureModes":["Non-public or unreachable URLs return an error or timeout","Private/intranet URLs that are inaccessible from the audit server fail with a connection error","Malformed URLs result in a validation error","Sites behind aggressive firewalls or WAFs may block the audit request","HTTPS sites with invalid certificates may fail or return partial results"],"whenToPreferThis":"Choose this endpoint when you need a quick, automated HTTP security header audit with a standardized A-F grade, cookie flag inspection, and version-leak detection for any public URL — especially useful for pre-launch checks, compliance reviews, or competitive benchmarking without needing to run your own tooling like securityheaders.com or custom curl scripts.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-01T18:46:12.761Z","isFirstParty":false,"canonicalSlug":"website-security-headers-audit-50915a49"}