{"uid":"cap_beo1ZzhHd8qXS3b3Jpoet","slug":"tariffmonkee-com-paid-sitegrade-domain-security-grader-26332d58","name":"tariffmonkee.com /paid/sitegrade – Domain Security Grader","description":"Domain security grade (0-100, A-F) from HTTPS reachability, security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and CAA records. Reports HTTPS connect success or failure, not raw certificate expiry. Registration facts are in /domain-intel; URL reputation is in /linkcheck.","url":"https://tariffmonkee.com/paid/sitegrade?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Bare domain to grade, no scheme."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["domain","grade","score","https","headers","caaRecords","findings"],"properties":{"grade":{"type":"string"},"https":{"type":"object","required":["reachable","redirectedFromHttp"],"properties":{"reachable":{"type":"boolean"},"redirectedFromHttp":{"type":"boolean"}}},"score":{"type":"number"},"domain":{"type":"string"},"headers":{"type":"object","required":["hsts","csp","xFrameOptions","xContentTypeOptions","referrerPolicy","permissionsPolicy","score","grade"],"properties":{"csp":{"type":"object","required":["present"],"properties":{"present":{"type":"boolean"}}},"hsts":{"type":"object","required":["present","includesSubDomains"],"properties":{"present":{"type":"boolean"},"includesSubDomains":{"type":"boolean"}}},"grade":{"type":"string"},"score":{"type":"number"},"xFrameOptions":{"type":"object","required":["present"],"properties":{"present":{"type":"boolean"}}},"referrerPolicy":{"type":"object","required":["present"],"properties":{"present":{"type":"boolean"}}},"permissionsPolicy":{"type":"object","required":["present"],"properties":{"present":{"type":"boolean"}}},"xContentTypeOptions":{"type":"object","required":["present"],"properties":{"present":{"type":"boolean"}}}}},"findings":{"type":"array","items":{"type":"string"}},"caaRecords":{"type":"array"}}}}}}},"responseSchema":{"type":"json","example":{"grade":"A","https":{"reachable":true,"redirectedFromHttp":true},"score":95,"domain":"github.com","headers":{"csp":{"value":"default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazona...","present":true},"hsts":{"maxAge":31536000,"present":true,"includesSubDomains":false},"grade":"A","score":95,"xFrameOptions":{"value":"deny","present":true},"referrerPolicy":{"value":"origin-when-cross-origin, strict-origin-when-cross-origin","present":true},"permissionsPolicy":{"present":false},"xContentTypeOptions":{"present":true}},"findings":[],"caaRecords":["0 issue \"digicert.com\"","0 issue \"globalsign.com\"","0 issue \"letsencrypt.org\"","0 issue \"sectigo.com\"","0 issuewild \"digicert.com\"","0 issuewild \"letsencrypt.org\"","0 issuewild \"sectigo.com\""]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wopY3Wh1C94wuBYamp-fy","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a domain's HTTPS reachability and security headers (HSTS, CSP, X-Frame-Options, etc.) plus CAA records, returning a 0-100 score with an A-F letter grade and detailed findings.","exampleAgentPrompt":"What's the security grade for example.com — does it have HTTPS, HSTS, and Content-Security-Policy set up properly?","exampleUseCases":[{"title":"Vendor security posture check","prompt":"Before we integrate with acme-payments.io, can you check their security grade? I want to know if they have HTTPS, HSTS, and CSP headers properly configured."},{"title":"Pre-launch site security audit","prompt":"We're about to launch mybrand.com — can you run a security header audit and tell me the letter grade so I know what to fix before we go live?"},{"title":"Monitoring third-party domain security","prompt":"Check the security grade for our partner portal at partner.bigcorp.com and let me know if they're missing any important security headers like X-Frame-Options or CAA records."}],"resultDescription":"Returns a 0-100 numeric score and an A-F letter grade for the domain, along with per-finding details: HTTPS connect success or failure, presence/absence of HSTS, CSP, X-Frame-Options, and other security headers, and CAA DNS record status.","failureModes":["Domain is unreachable — HTTPS connect failure noted in findings, still returns a grade","Invalid or malformed domain input — likely returns an error response","Domain has no DNS record — connection failure reported","Payment not settled — 402 response, request not processed"],"whenToPreferThis":"Use this endpoint when you need a quick, structured A-F security posture assessment of a domain's HTTPS and security header configuration. Prefer it over /linkcheck (which checks URL reputation/safety) or /domain-intel (which returns ownership/registration facts). If you need a combined report including all three, use the orchestrated bundle endpoint instead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T07:40:57.054Z","isFirstParty":false,"canonicalSlug":"tariffmonkee-com-paid-sitegrade-domain-security-grader-26332d58"}