{"uid":"cap_dZ9_QpoXtAPiD7mNhAnuT","slug":"signaldesk-ai-security-headers-checker-d90c1918","name":"SignalDesk AI – Security Headers Checker","description":"Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.","url":"https://x402-agent.kariguetoazul.workers.dev/api/security/headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","maxLength":2000,"minLength":8,"description":"Public HTTPS URL."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"url":"https://example.com/","http":200,"headers":{"server":"cloudflare","content-type":"text/html; charset=utf-8"},"missing":["strict-transport-security","content-security-policy","x-content-type-options","x-frame-options","referrer-policy","permissions-policy"],"warning":"Header presence alone does not establish security.","fetched_at":"2026-10-02T09:44:48.181Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SGKfO-YdHpG-dxe9wBRZa","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches the HTTP response headers of a given public HTTPS URL and identifies which security headers are present or missing","exampleAgentPrompt":"Can you check what security headers https://example.com/ has and tell me which important ones like Content-Security-Policy or Strict-Transport-Security are missing?","exampleUseCases":[{"title":"Pre-launch security header audit","prompt":"Before we go live, can you check https://myapp.io/ and list all the important security headers that are missing so we can fix them?"},{"title":"Third-party vendor security check","prompt":"I need to verify that our vendor's site https://vendor-portal.com/ has proper security headers like X-Frame-Options and referrer-policy set — can you pull that info?"},{"title":"Continuous compliance monitoring","prompt":"Check the security headers on https://dashboard.internal-tool.com/ and tell me the HTTP status code and which headers like permissions-policy or content-security-policy are absent."}],"resultDescription":"Returns a JSON object containing the target URL, HTTP status code, a dictionary of all response headers received, a list of missing recommended security headers (e.g. strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy), a warning that header presence alone does not establish security, and a timestamp of when the fetch occurred.","failureModes":["Non-HTTPS or invalid URL returns a validation error — URL must be a public HTTPS address 8-2000 characters","Target URL is unreachable or times out — upstream fetch failure with no headers returned","Private or localhost URLs rejected by the service","Payment not completed — x402 payment required before endpoint responds","URL returns non-standard status codes that may cause partial or empty header data"],"whenToPreferThis":"Use this endpoint when you need a fast, lightweight check of which HTTP security headers a public HTTPS URL exposes, without setting up a full browser-based security scanner. It is ideal for automated security audits, pre-deployment checklists, or verifying third-party sites. Prefer this over a full penetration testing tool when you only need header-level reconnaissance.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:42:13.623Z","isFirstParty":false,"canonicalSlug":"signaldesk-ai-security-headers-checker-d90c1918"}