{
  "x402Version": 2,
  "id": 27872,
  "slug": "27872",
  "resource": "https://agent402.tools/api/http-headers",
  "description": "Fetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP/COEP. Scores 0–100 by presence, flags weak HSTS, and warns on Server/X-Powered-By identity leaks. SSRF-protected.",
  "type": "http",
  "serviceName": "HTTP headers + security analysis",
  "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784423094/bazaar-icons/478aced8e219894c.png",
  "resourceType": "Beauty & Personal Care",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:137",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:42161",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:143",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:43114",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:1329",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0xe15fC38F6D8c56aF07bbCBe3BAf5708A2Bf42392",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:10",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
      "amount": "4000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:4663",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:42220",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "upto",
      "network": "eip155:8453",
      "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "payTo": "J7aN3PLJnTCF5qpEnvJHJsnCjcGuqC2rYtEM8Gv3xwg",
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "stellar:pubnet",
      "payTo": "GDNJXCKW7ZM7GEEVP674TWPU26YJNBQ2FI4ZIPRKTPTNUEJMDHFJWWRL",
      "asset": "CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75",
      "amount": "30000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=",
      "payTo": "C7IIHG7SPLPZ5H7ZT6HW3UV2OQMQQE6Y2HBNGZXSLRJULE42BEE2OY2XIE",
      "asset": "31566704",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "properties": {
          "fetchedAt": {
            "type": "string"
          },
          "finalUrl": {
            "type": "string"
          },
          "headers": {
            "type": "object"
          },
          "httpVersion": {},
          "redirected": {
            "type": "boolean"
          },
          "security": {
            "type": "object"
          },
          "status": {
            "type": "integer"
          },
          "statusText": {
            "type": "string"
          },
          "url": {
            "type": "string"
          }
        },
        "required": [
          "url",
          "finalUrl",
          "status",
          "statusText",
          "redirected",
          "headers",
          "security",
          "fetchedAt"
        ],
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "url": "https://agent402.tools"
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "fetchedAt": "2026-06-19T22:00:00.000Z",
            "finalUrl": "https://agent402.tools/",
            "headers": {
              "content-type": "text/html; charset=utf-8",
              "server": "railway-hikari",
              "x-content-type-options": "nosniff"
            },
            "httpVersion": null,
            "redirected": false,
            "security": {
              "findings": [
                {
                  "header": "HSTS",
                  "present": true,
                  "value": "max-age=63072000; includeSubDomains; preload"
                },
                {
                  "header": "XCTO",
                  "present": true,
                  "value": "nosniff"
                }
              ],
              "score": 100,
              "warnings": [
                "info: Server header names the platform (railway-hikari); also visible from DNS, low value to hide"
              ]
            },
            "status": 200,
            "statusText": "OK",
            "url": "https://agent402.tools/"
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "properties": {
                  "method": {
                    "description": "GET or HEAD (default GET)",
                    "type": "string"
                  },
                  "url": {
                    "description": "Public http(s) URL to probe",
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "properties": {
                  "fetchedAt": {
                    "type": "string"
                  },
                  "finalUrl": {
                    "type": "string"
                  },
                  "headers": {
                    "type": "object"
                  },
                  "httpVersion": {},
                  "redirected": {
                    "type": "boolean"
                  },
                  "security": {
                    "type": "object"
                  },
                  "status": {
                    "type": "integer"
                  },
                  "statusText": {
                    "type": "string"
                  },
                  "url": {
                    "type": "string"
                  }
                },
                "required": [
                  "url",
                  "finalUrl",
                  "status",
                  "statusText",
                  "redirected",
                  "headers",
                  "security",
                  "fetchedAt"
                ],
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    },
    "builder-code": {
      "info": {
        "a": "bc_b4aw4uzd"
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "additionalProperties": false,
        "properties": {
          "a": {
            "description": "App builder code",
            "pattern": "^[a-z0-9_]{1,32}$",
            "type": "string"
          },
          "s": {
            "description": "Service builder codes",
            "items": {
              "pattern": "^[a-z0-9_]{1,32}$",
              "type": "string"
            },
            "maxItems": 11,
            "type": "array"
          },
          "w": {
            "description": "Wallet builder code",
            "pattern": "^[a-z0-9_]{1,32}$",
            "type": "string"
          }
        },
        "type": "object"
      }
    },
    "payment-identifier": {
      "info": {
        "required": false
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "id": {
            "maxLength": 128,
            "minLength": 16,
            "pattern": "^[a-zA-Z0-9_-]+$",
            "type": "string"
          },
          "required": {
            "type": "boolean"
          }
        },
        "required": [
          "required"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "network",
    "security",
    "headers",
    "audit",
    "hsts",
    "bazaar",
    "builder-code",
    "payment-identifier"
  ],
  "sourceHost": "agent402.tools",
  "lastUpdated": "2026-10-08T06:10:50.154Z",
  "quality": {
    "calls30d": 5,
    "uniquePayers30d": 4,
    "lastCalledAt": "2026-10-08T06:10:49.953Z"
  },
  "metadata": {
    "serviceName": "HTTP headers + security analysis",
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784423094/bazaar-icons/478aced8e219894c.png",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "url": "https://agent402.tools"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "fetchedAt": "2026-06-19T22:00:00.000Z",
              "finalUrl": "https://agent402.tools/",
              "headers": {
                "content-type": "text/html; charset=utf-8",
                "server": "railway-hikari",
                "x-content-type-options": "nosniff"
              },
              "httpVersion": null,
              "redirected": false,
              "security": {
                "findings": [
                  {
                    "header": "HSTS",
                    "present": true,
                    "value": "max-age=63072000; includeSubDomains; preload"
                  },
                  {
                    "header": "XCTO",
                    "present": true,
                    "value": "nosniff"
                  }
                ],
                "score": 100,
                "warnings": [
                  "info: Server header names the platform (railway-hikari); also visible from DNS, low value to hide"
                ]
              },
              "status": 200,
              "statusText": "OK",
              "url": "https://agent402.tools/"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "method": {
                      "description": "GET or HEAD (default GET)",
                      "type": "string"
                    },
                    "url": {
                      "description": "Public http(s) URL to probe",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "fetchedAt": {
                      "type": "string"
                    },
                    "finalUrl": {
                      "type": "string"
                    },
                    "headers": {
                      "type": "object"
                    },
                    "httpVersion": {},
                    "redirected": {
                      "type": "boolean"
                    },
                    "security": {
                      "type": "object"
                    },
                    "status": {
                      "type": "integer"
                    },
                    "statusText": {
                      "type": "string"
                    },
                    "url": {
                      "type": "string"
                    }
                  },
                  "required": [
                    "url",
                    "finalUrl",
                    "status",
                    "statusText",
                    "redirected",
                    "headers",
                    "security",
                    "fetchedAt"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      },
      "builder-code": {
        "info": {
          "a": "bc_b4aw4uzd"
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "additionalProperties": false,
          "properties": {
            "a": {
              "description": "App builder code",
              "pattern": "^[a-z0-9_]{1,32}$",
              "type": "string"
            },
            "s": {
              "description": "Service builder codes",
              "items": {
                "pattern": "^[a-z0-9_]{1,32}$",
                "type": "string"
              },
              "maxItems": 11,
              "type": "array"
            },
            "w": {
              "description": "Wallet builder code",
              "pattern": "^[a-z0-9_]{1,32}$",
              "type": "string"
            }
          },
          "type": "object"
        }
      },
      "payment-identifier": {
        "info": {
          "required": false
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "id": {
              "maxLength": 128,
              "minLength": 16,
              "pattern": "^[a-zA-Z0-9_-]+$",
              "type": "string"
            },
            "required": {
              "type": "boolean"
            }
          },
          "required": [
            "required"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "agent402.tools",
    "manifest_name": "agent402.tools",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "fetchedAt": "2026-06-19T22:00:00.000Z",
    "finalUrl": "https://agent402.tools/",
    "headers": {
      "content-type": "text/html; charset=utf-8",
      "server": "railway-hikari",
      "x-content-type-options": "nosniff"
    },
    "httpVersion": null,
    "redirected": false,
    "security": {
      "findings": [
        {
          "header": "HSTS",
          "present": true,
          "value": "max-age=63072000; includeSubDomains; preload"
        },
        {
          "header": "XCTO",
          "present": true,
          "value": "nosniff"
        }
      ],
      "score": 100,
      "warnings": [
        "info: Server header names the platform (railway-hikari); also visible from DNS, low value to hide"
      ]
    },
    "status": 200,
    "statusText": "OK",
    "url": "https://agent402.tools/"
  }
}