{"uid":"cap_u4CEy4gI93etkzeVQ1fAa","slug":"cian-endpoint-health-audit-def25bf1","name":"Cian Endpoint Health Audit","description":"HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are refused.","url":"https://cian-x402.netlify.app/v1/audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["input"],"properties":{"input":{"type":"object","required":["type","method","discoverable"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"queryParams":{"type":"object","additionalProperties":{"type":"string"}},"discoverable":{"const":true}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_De-p09r6yr0qRXYK94tQr","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a public HTTP URL for status, redirect chain, latency percentiles, TLS certificate health, security headers, and detected anomalies","exampleAgentPrompt":"Can you run a full health and security audit on https://api.myapp.com — I want to see the redirect chain, TLS cert expiry, latency p50/p95, and any anomalies like missing HSTS, CSP, or CORS wildcard issues?","exampleUseCases":[{"title":"Pre-launch security header check","prompt":"Before we go live, audit https://staging.mycompany.com and tell me if we're missing any critical security headers like HSTS, CSP, or X-Content-Type-Options, and flag any TLS issues."},{"title":"Production API latency investigation","prompt":"Something feels slow on our production endpoint — can you audit https://api.myservice.com and give me the p50 and p95 latency numbers plus any anomalies detected?"},{"title":"TLS certificate expiry monitoring","prompt":"Check https://checkout.mystore.com for me — I need to know when the TLS cert expires, who issued it, and whether there are any weak TLS or insecure cookie warnings I should fix."}],"resultDescription":"Returns HTTP status code and redirect chain, p50/p95 latency measurements from repeated samples, TLS certificate expiry date and issuer, relevant response headers, and a list of detected anomalies including missing HSTS/CSP/X-Content-Type-Options, expiring certificate, weak TLS, CORS wildcard, insecure cookies, server version disclosure, slow p95 response times, and redirect loops. Private, loopback, and link-local addresses are refused.","failureModes":["Target URL resolves to a private, loopback, or link-local address — request refused for security","URL is unreachable or times out — latency metrics unavailable","TLS handshake failure — certificate details not retrievable","Malformed URL input — validation error returned","Redirect loop detected and reported as an anomaly rather than followed indefinitely"],"whenToPreferThis":"Use this endpoint when you need a comprehensive one-shot security and performance audit of a single public HTTP endpoint, especially when you want both header/TLS security analysis and latency percentiles in a single call. Prefer this over generic uptime monitors when you need anomaly detection (HSTS, CSP, CORS, cookie flags, version disclosure) rather than just a status check.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:31:48.866Z","isFirstParty":false,"canonicalSlug":"cian-endpoint-health-audit-def25bf1"}