{"uid":"cap_nDfW38tR0qFZOm1LgKmRb","slug":"delx-security-headers-score-8db94395","name":"Delx Security Headers Score","description":"Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and produc…","url":"https://api.delx.ai/api/v1/x402/security-headers-score","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"headers":{"type":"object","description":"Input field: headers."}}},"responseSchema":{"type":"json","example":{"score":40,"schema":"delx/util-security-headers-score/v1","missing":["permissions-policy","referrer-policy","x-content-type-options"],"present":["content-security-policy","strict-transport-security"],"advisory":"Header presence does not prove policy correctness."}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4-Hw-JUlGZNHWF2UwpQsd","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scores the presence of five high-value browser security headers in a given set of HTTP response headers, returning a deterministic machine-readable JSON result.","exampleAgentPrompt":"Can you score the browser security headers for my web app? Here are the response headers it returns: {'Content-Security-Policy': 'default-src self', 'X-Frame-Options': 'DENY', 'Strict-Transport-Security': 'max-age=31536000'}","exampleUseCases":[{"title":"Pre-deployment security header audit","prompt":"Before we push this API to production, can you check these response headers and score them for the five key browser security headers? Headers: {'X-Frame-Options': 'SAMEORIGIN', 'X-Content-Type-Options': 'nosniff', 'Referrer-Policy': 'no-referrer'}"},{"title":"Enterprise integration preflight check","prompt":"We're about to integrate with a third-party vendor — can you analyze these HTTP response headers they sent us and give me a security header score so we know if their endpoint is up to standard?"},{"title":"Continuous security posture monitoring","prompt":"Run a security headers score on these response headers from our staging environment and tell me which of the five critical headers are missing or misconfigured: {'Strict-Transport-Security': 'max-age=86400', 'Content-Security-Policy': 'default-src *'}"}],"resultDescription":"A deterministic JSON object indicating the presence and score of five high-value browser security headers, with per-header flags and an overall advisory score. Results are stateless and advisory — no data is retained.","failureModes":["Missing or malformed 'headers' object in request body returns an error or empty score","Passing non-HTTP-header key-value pairs may result in zero matches and a low score","Unexpected header value formats may not be recognized as compliant","Network or payment authorization failures may prevent the call from completing"],"whenToPreferThis":"Choose this endpoint when you need a fast, deterministic, stateless preflight or advisory check on HTTP response header security posture — especially within enterprise agent workflows before data, policy, or integration decisions. It is purpose-built for scoring exactly five high-value browser security headers and returns machine-readable JSON, making it ideal for automated pipelines. Prefer it over generic web crawlers or full vulnerability scanners when you already have the headers and just need a scored analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T19:01:48.156Z","isFirstParty":false}