{"uid":"cap_XUFSbGpbf_DNXpSppzfHI","slug":"lordevo-security-headers-d9eb40ba","name":"Lordevo Security Headers","description":"SEO audits, website security checks, SEO content plans, articles and site fix plans as API endpoints for AI agents. Pay per request in USDC on Base with…","url":"https://shop.lordevo.com/api/quick/security-headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"Public http(s) URL or bare domain, e.g. https://example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"tls":{"valid":true,"protocol":"TLSv1.3","days_left":61},"url":"https://example.com/","tool":"security-headers","grade":"B","https":true,"score":74,"issues":[{"id":"missing_content-security-policy","fix":"Add a Content-Security-Policy...","title":"Missing content-security-policy.","severity":"medium"}],"headers":{"content-security-policy":null,"strict-transport-security":"max-age=31536000"},"http_to_https":"301 -> https://example.com/"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_yr2ja15HCEk6K1UY2Pkf-","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Passively audits a public website's HTTPS configuration, HTTP security headers, TLS version, certificate expiry, and cookie flags, returning an overall letter grade from A+ down.","exampleAgentPrompt":"Can you run a quick security headers audit on https://mybusiness.com and tell me what grade it gets, whether HTTPS and HSTS are set up correctly, and what headers are missing?","exampleUseCases":[{"title":"Pre-launch security review","prompt":"Before we go live, can you check the security headers and TLS setup on https://staging.myapp.io and tell me the overall grade plus any issues I need to fix?"},{"title":"Client website security audit","prompt":"I need to audit the HTTPS configuration for a client's site at https://clientbrand.com — what's the security grade, is the cert still valid, and which headers like CSP or HSTS are missing?"},{"title":"Monitor cert expiry and redirect","prompt":"Can you check https://myshop.com and tell me how many days are left on the TLS certificate, whether HTTP redirects properly to HTTPS, and if there are any serious security header problems?"}],"resultDescription":"Returns a JSON object with an overall letter grade (A+ to F), numeric score, TLS protocol version and certificate days remaining, HTTPS redirect chain, and a per-header breakdown (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie flags, version disclosure). Each detected issue includes a title, severity level, and suggested fix.","failureModes":["Invalid or non-public URL returns an error or empty result","Site behind a firewall or IP allowlist may be unreachable","Very slow or timing-out origins may produce incomplete TLS data","HTTP-only sites with no HTTPS will report HTTPS checks as failed","Malformed domain input causes a validation error"],"whenToPreferThis":"Choose this endpoint when you need a fast, passive, no-login security header and TLS grade for any publicly reachable URL. It is purpose-built for website security audits, CI/CD checks, and client reporting where you want a letter grade and actionable fix list in one call, without deploying a full scanner.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:36.970Z","isFirstParty":false,"canonicalSlug":"lordevo-security-headers-d9eb40ba"}