Passive HTTP security header review for an authorized external target (no exploitation; pl
Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked)
20000 (raw units)
price
5
calls / 30d
3
unique payers
2026-09-17
updated
Provider
conc-exe.xyz · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0xb85c83cc448edca8eb724f5d79b523faff9375a7",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "20000",
"maxTimeoutSeconds": 120
},
{
"scheme": "exact",
"network": "eip155:42161",
"payTo": "0x94db8343ec6839131c082126ea1e723e30c256f3",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "20000",
"maxTimeoutSeconds": 120
},
{
"scheme": "exact",
"network": "eip155:4663",
"payTo": "0x94db8343ec6839131c082126ea1e723e30c256f3",
"asset": "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",
"amount": "20000",
"maxTimeoutSeconds": 120
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "9uiwHcDNYg8rbPDRaJBfMHVo8f8CAgCCZzz1JB6XyEFN",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "20000",
"maxTimeoutSeconds": 120
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "9uiwHcDNYg8rbPDRaJBfMHVo8f8CAgCCZzz1JB6XyEFN",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "20000",
"maxTimeoutSeconds": 120
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "9uiwHcDNYg8rbPDRaJBfMHVo8f8CAgCCZzz1JB6XyEFN",
"asset": "F2bnJW1z55UQ9ZqGX5RwYQfvNJrd23n66eyBV5QZpump",
"amount": "175000000",
"maxTimeoutSeconds": 120
}
]Output schema
{
"bazaar": {
"info": {
"input": {
"body": {
"allowlist": [
"*.example.com"
],
"authorized": true,
"target": "https://app.example.com"
},
"bodyType": "json",
"headers": {
"Content-Type": "application/json"
},
"method": "POST",
"type": "http"
},
"output": {
"example": {
"checks": [
{
"header": "x-content-type-options",
"id": "x-content-type-options",
"present": true
}
],
"disclaimer": "Passive header review only.",
"kind": "security-headers",
"ok": true,
"summary": {
"grade": "moderate",
"present": 4,
"total": 6
},
"target": {
"hostname": "app.example.com",
"origin": "https://app.example.com"
}
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"additionalProperties": false,
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"allowlist": {
"description": "Optional hostname allowlist",
"items": {
"type": "string"
},
"type": "array"
},
"authorized": {
"description": "Must be true — caller attests permission",
"type": "boolean"
},
"target": {
"description": "Authorized external https origin (never conc-exe.xyz)",
"type": "string"
}
},
"required": [
"target",
"authorized"
],
"type": "object"
},
"bodyType": {
"const": "json"
},
"headers": {
"type": "object"
},
"method": {
"const": "POST"
},
"type": {
"const": "http"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"checks": {
"items": {
"type": "object"
},
"type": "array"
},
"disclaimer": {
"type": "string"
},
"kind": {
"type": "string"
},
"ok": {
"type": "boolean"
},
"summary": {
"type": "object"
},
"target": {
"type": "object"
}
},
"required": [
"ok",
"kind",
"target"
],
"type": "object"
},
"example": {
"additionalProperties": false,
"properties": {
"checks": {
"items": {
"type": "object"
},
"type": "array"
},
"disclaimer": {
"type": "string"
},
"kind": {
"type": "string"
},
"ok": {
"type": "boolean"
},
"summary": {
"type": "object"
},
"target": {
"type": "object"
}
},
"required": [
"ok",
"kind",
"target"
],
"type": "object"
},
"type": {
"const": "json"
}
},
"required": [
"type",
"example"
],
"type": "object"
}
},
"required": [
"input",
"output"
],
"type": "object"
}
}
}Use it
curl
curl "https://conc-exe.xyz/api/concierge-security-headers" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://conc-exe.xyz/api/concierge-security-headers");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://conc-exe.xyz/api/concierge-security-headers")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/3037.json, and this resource appears in /discovery/resources and /discovery/search.