{"uid":"cap_gaWUWF8_sWYwFIWHUJebT","slug":"delx-csp-policy-audit-afc36736","name":"Delx CSP Policy Audit","description":"Audit a Content-Security-Policy for missing defaults and unsafe script directives. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates production reliability. Returns bounded machine-readable JSON for $0.002 USDC via x402 on Base. Execution is deterministic, first-party, local-only, stateless, and does not call an upstream provider; structured validation failures are not billed.","url":"https://api.delx.ai/api/v1/x402/csp-policy-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"policy":{"type":"string","maxLength":100000}}},"responseSchema":{"type":"json","example":{"risk":"low","schema":"delx/csp-policy-audit/v1","findings":[],"directives":["default-src","script-src"],"directive_count":2}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_N4ku7vLkYL0JHq7-XMVVO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a Content-Security-Policy header string for missing defaults and unsafe script directives, returning structured JSON findings.","exampleAgentPrompt":"Can you audit this Content-Security-Policy for any missing defaults or unsafe script directives: \"default-src 'self'; script-src 'unsafe-inline' https://cdn.example.com; style-src 'self'\"?","exampleUseCases":[{"title":"Pre-deploy CSP safety check","prompt":"Before I deploy this new API change, audit my Content-Security-Policy header for missing defaults or unsafe directives: \"default-src 'none'; script-src 'self' 'unsafe-eval'; img-src *\""},{"title":"Autonomous workflow preflight gate","prompt":"My agent is about to process untrusted user input — first check this CSP policy for any unsafe-inline or unsafe-eval script directives and missing defaults: \"script-src 'unsafe-inline'; object-src 'none'\""},{"title":"Production reliability review","prompt":"I'm reviewing our production site's security headers. Can you run a CSP audit on this policy and tell me what's missing or unsafe: \"default-src 'self'; script-src 'self' 'unsafe-inline' https://scripts.example.com; connect-src *\""}],"resultDescription":"A bounded machine-readable JSON object listing any detected issues in the provided CSP, including missing directive defaults and unsafe script-related directives such as unsafe-inline or unsafe-eval. Structured validation failures are not billed.","failureModes":["Policy string exceeds 100,000 character limit — request rejected","Malformed or empty policy string — validation error returned without charge","Missing required 'policy' field in request body — error response","Network timeout before response — retry may be needed"],"whenToPreferThis":"Choose this endpoint when you need a deterministic, stateless, first-party CSP audit without calling any upstream provider — ideal as a preflight check in autonomous agent workflows before acting on untrusted input, deploying API changes, or evaluating production HTTP headers. It is inexpensive at $0.002 USDC and returns structured JSON suitable for programmatic consumption.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T19:02:18.538Z","isFirstParty":false}