{"uid":"cap_qcVZ_9eXp_UeA1kFGyDUQ","slug":"http-headers-security-grade-f8de6029","name":"HTTP Headers & Security Grade","description":"Fetch a URL's HTTP response headers with the full redirect chain, status, server, caching and a security grade (A-F) based on HSTS, CSP, X-Frame-Options and other headers, listing what is missing. Use for security reviews, redirect debugging or SEO checks.","url":"https://bess-x402.onrender.com/v1/web/headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"URL or domain"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_WPNQYB4APiKbvV2JFUS9b","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches HTTP response headers with the full redirect chain and assigns a security grade (A–F) based on HSTS, CSP, X-Frame-Options, and other security headers.","exampleAgentPrompt":"Can you fetch the HTTP headers for https://example.com and tell me its security grade — let me know which security headers like HSTS, CSP, and X-Frame-Options are missing?","exampleUseCases":[{"title":"Pre-launch security header audit","prompt":"Before we go live, can you check https://myapp.io's HTTP headers and give me a security grade? I want to know exactly which headers like HSTS, CSP, and X-Frame-Options we're missing so we can fix them."},{"title":"Redirect chain debugging","prompt":"I think https://old-domain.com is doing a weird redirect — can you fetch its headers and show me the full redirect chain so I can see where it's landing?"},{"title":"Competitor site reconnaissance","prompt":"Can you pull the HTTP response headers for https://competitor.com? I want to see what server they're running, how they handle caching, and what their security posture looks like."}],"resultDescription":"Returns the full set of HTTP response headers, the complete redirect chain with intermediate status codes, the final HTTP status, server identifier, caching directives, and a security grade from A to F based on presence of HSTS, CSP, X-Frame-Options, and other security headers, plus a list of which required security headers are missing.","failureModes":["Invalid or unreachable URL returns an error with no headers","Domain that times out or refuses connection returns a connection error","Malformed URL input causes a validation error","Some servers block automated requests, returning 403 or no meaningful headers"],"whenToPreferThis":"Use this endpoint when you need a quick, combined view of HTTP headers plus a structured security grade without setting up a full scanning tool. It is particularly useful for one-off security reviews, redirect debugging, and SEO header checks where you want to see the full redirect chain and a graded assessment of missing security headers in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-28T06:44:08.967Z","isFirstParty":false,"canonicalSlug":"http-headers-security-grade-f8de6029"}