{"uid":"cap_bf0CDuDXPL1jH4h5zJTh4","slug":"papacasper-cors-policy-check-9aecc5bc","name":"PapaCasper CORS Policy Check","description":"A hosted MCP server exposing utility tools any AI agent can call over HTTP — page-to-markdown, SEO audits, robots/sitemap checks, and more.","url":"https://papacasper.com/mcp/pay/cors_policy_check","method":"POST","headers":{},"bodySchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"The URL to probe"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_IHNERD9uJDwsguIXybJ1b","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Probes a given URL and returns its CORS (Cross-Origin Resource Sharing) policy configuration and headers","exampleAgentPrompt":"Can you check the CORS policy for https://api.example.com and tell me which origins and HTTP methods are allowed?","exampleUseCases":[{"title":"Debugging cross-origin API access","prompt":"I'm getting CORS errors when my frontend tries to call https://api.myservice.com/data — can you check what CORS headers that endpoint returns so I can figure out what's blocking it?"},{"title":"Security audit of third-party API","prompt":"Before we integrate with https://partner-api.com/v1/endpoint, can you inspect its CORS policy to see if it's overly permissive — like if it allows any origin?"},{"title":"Verifying CORS fix after deployment","prompt":"We just pushed a fix to enable CORS on https://staging.ourapp.com/api/users — can you probe that URL and confirm it's now returning the correct Access-Control-Allow-Origin headers?"}],"resultDescription":"Returns an object describing the CORS policy of the probed URL, including response headers such as Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Allow-Headers, and other CORS-related configuration details observed from the server's response.","failureModes":["URL is unreachable or returns a network error — empty or error object returned","URL does not set any CORS headers — result will indicate absence of CORS policy","Invalid or malformed URL provided — request may fail with a validation error","Target server blocks automated requests or returns 403 — may yield incomplete CORS data"],"whenToPreferThis":"Use this endpoint when you need a quick, hosted probe of a URL's CORS configuration without running your own tooling. It's ideal for agents that need to audit, debug, or validate CORS policies as part of a web security check, integration readiness assessment, or deployment verification workflow. Prefer it over manual header inspection when operating in an automated pipeline.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:32:52.815Z","isFirstParty":false}