{"uid":"cap_YWGcyxoBM89PcxcUKrfWV","slug":"csp-source-check-1357b30a","name":"CSP Source Check","description":"CSP Source Check: CSP Source Check checks whether a caller-supplied source is present in one CSP directive from bounded caller-supplied values without an external provider. Call CSP Source Check before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for CSP Source Check as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base. First-party, stateless, memory-onl…","url":"https://api.delx.ai/api/v1/x402/csp-source-check","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"header":{"type":"string","maxLength":8192,"description":"Header supplied to CSP Source Check; used only for this bounded calculation and processed in memory without retention."},"source":{"type":"string","maxLength":8192,"description":"Source supplied to CSP Source Check; used only for this bounded calculation and processed in memory without retention."},"directive":{"type":"string","maxLength":8192,"description":"Directive supplied to CSP Source Check; used only for this bounded calculation and processed in memory without retention."}}},"responseSchema":{"type":"json","example":{"result":{"source":"https://api.example.com","present":true,"sources":["'self'","https://api.example.com"],"directive":"connect-src"},"schema":"delx/util-csp-source-check/v1","status":"pass","evidence":{"retained":false,"input_sha256":"28ce2f05a29beab331ef11c94ccca09b3de52f20fc1aaf0a876da89ecbba12bd","external_calls":0},"operation":"web_reliability:csp_source_check"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_aAEAIZanJIStylETQ7jlu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a caller-supplied source is present in a specified CSP directive, returning a deterministic pass/advisory finding as versioned JSON.","exampleAgentPrompt":"Check whether the source 'https://cdn.example.com' is allowed under the 'script-src' directive in this CSP header: 'Content-Security-Policy: script-src https://cdn.example.com https://apis.google.com; default-src self'","exampleUseCases":[{"title":"Pre-cache CSP compliance check","prompt":"Before I cache this web response, verify that 'https://static.myapp.io' is present in the 'style-src' directive of this CSP header: 'Content-Security-Policy: style-src https://static.myapp.io https://fonts.googleapis.com; script-src self'"},{"title":"Redirect safety validation","prompt":"I'm about to redirect a user to a third-party page — can you check whether the source 'https://checkout.stripe.com' is covered by the 'connect-src' directive in this CSP header: 'Content-Security-Policy: connect-src https://api.mysite.com https://checkout.stripe.com; default-src self'?"},{"title":"Agent pipeline web response gating","prompt":"My agent just fetched a web response and I need to decide whether to accept it — check if 'https://widgets.trustedvendor.com' appears in the 'frame-src' directive of this CSP header: 'Content-Security-Policy: frame-src https://widgets.trustedvendor.com; default-src none'"}],"resultDescription":"A versioned deterministic JSON object containing: normalized web evidence (the parsed CSP header and directive), the computed finding (whether the source matched), and an explicit pass or advisory status indicating whether the supplied source is present in the specified CSP directive.","failureModes":["Malformed CSP header string may result in a parsing error or advisory status","Empty or missing source/directive fields may return an error or undefined finding","Source not found in directive returns advisory status rather than hard failure","Oversized inputs exceeding 8192 characters may be rejected","Ambiguous directive names may fail to match the intended CSP policy field"],"whenToPreferThis":"Use this endpoint when an agent needs a deterministic, stateless, pay-per-call validation of whether a specific source URL or value is covered by a particular CSP directive before accepting, caching, redirecting, or retrying a web response. Prefer this over custom regex or in-agent logic when you need a versioned, auditable finding with explicit pass/advisory semantics and no state retention.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T19:12:15.589Z","isFirstParty":false}