{"uid":"cap_y9OE8vUpuGvyMenx1h46_","slug":"atk-security-headers-checker-ca20820f","name":"ATK Security Headers Checker","description":"HTTPS security headers of a public website's homepage (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) with concrete fixes.","url":"https://atkvn.com/agent/v1/security-headers?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["hostname"],"properties":{"hostname":{"type":"string","description":"e.g. www.example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"todo":["Add X-Content-Type-Options: nosniff."],"missing":["permissions-policy"],"hostname":"www.example.com"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kN4WL9Jpo-X9ox3Jsn2G6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a hostname for missing or misconfigured HTTP security headers and returns actionable remediation guidance","exampleAgentPrompt":"Can you check what HTTP security headers www.example.com is missing and tell me what I need to fix?","exampleUseCases":[{"title":"Pre-launch security header audit","prompt":"Before we go live, can you check what HTTP security headers are missing or misconfigured on www.myapp.com so we can fix them?"},{"title":"Compliance check for customer-facing portal","prompt":"Our security team needs to know which HTTP security headers are absent on portal.acme.com — can you run a check and list what needs to be added?"},{"title":"Routine site hardening review","prompt":"Can you audit the security headers on shop.mybrand.com and give me a to-do list of what's missing so I can harden it?"}],"resultDescription":"A JSON object containing the hostname checked, a list of missing security headers (e.g. permissions-policy), and a todo list with specific, actionable remediation steps (e.g. 'Add X-Content-Type-Options: nosniff').","failureModes":["Invalid or unreachable hostname returns an error or empty results","Hostname without a scheme or with typos may fail validation","Rate limiting or payment failure (x402) prevents the call from completing","Some headers may only be detectable if the server responds on HTTP/HTTPS; firewalled hosts may return incomplete results"],"whenToPreferThis":"Choose this endpoint when you need a quick, programmatic audit of HTTP security headers for a specific hostname — especially in automated pipelines, CI/CD checks, or agent-driven security reviews. It is ideal when you want both a list of missing headers and specific remediation instructions rather than a raw header dump. Prefer this over manual curl checks or full vulnerability scanners when the goal is targeted, actionable HTTP header compliance data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:32:47.903Z","isFirstParty":false,"canonicalSlug":"atk-security-headers-checker-ca20820f"}