{"uid":"cap_w4ovL459pSPsN2bAGE7dB","slug":"bot-bazaar-csp-policy-linter-8e4ba176","name":"Bot Bazaar CSP Policy Linter","description":"Lint a Content-Security-Policy header string for unsafe-eval, wildcard script sources, and default-src restrictions.","url":"https://bot-bazaar.fly.dev/v1/x402/csp-policy-lint?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"policy":{"type":"string","description":"CSP policy string"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Hqlj6ax_Vwb2MmJr0rexI","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Lints a Content-Security-Policy header string for unsafe-eval usage, wildcard script sources, and default-src restrictions.","exampleAgentPrompt":"Can you lint this CSP header for me and flag any issues like unsafe-eval, wildcard script sources, or missing default-src: \"default-src 'self'; script-src 'unsafe-eval' *; img-src 'self'\"?","exampleUseCases":[{"title":"Pre-deploy CSP security audit","prompt":"Before I ship this site, check my Content-Security-Policy header for problems — especially unsafe-eval and wildcard script sources: \"default-src 'none'; script-src 'self' 'unsafe-eval'; connect-src *\""},{"title":"CI pipeline CSP gate check","prompt":"Run a lint check on this CSP policy string and tell me if it passes or has any dangerous directives like unsafe-eval or open wildcards: \"script-src * 'unsafe-eval'; default-src 'self'\""},{"title":"Investigating XSS surface in CSP","prompt":"I think my CSP might be too permissive — can you inspect this policy and highlight anything that could allow script injection, like wildcard sources or unsafe-eval: \"script-src https: 'unsafe-eval'; default-src 'self' https:\""}],"resultDescription":"Returns a structured lint report identifying whether the CSP string contains unsafe-eval usage, wildcard script source entries, and whether default-src restrictions are properly defined, along with specific findings and severity indicators for each issue.","failureModes":["Missing or empty policy query parameter returns an error","Malformed or non-standard CSP strings may produce incomplete analysis","Very long CSP strings may be truncated or rejected","Network timeout if the service is unavailable"],"whenToPreferThis":"Use this endpoint when you need a quick, programmatic lint check of a CSP header string specifically for unsafe-eval, wildcard script sources, and default-src coverage — ideal for CI/CD pipelines, pre-deploy audits, or agent-driven security workflows that need structured findings rather than human-readable prose.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T19:06:41.441Z","isFirstParty":false,"canonicalSlug":"bot-bazaar-csp-policy-linter-8e4ba176"}