{ "x402Version": 2, "id": 35959, "slug": "35959", "resource": "https://tanod.dev/v1/headers", "description": "sitepeek (Tanod) security headers: a score and grade (A-F) of one response's HSTS, CSP, framing, content-type, referrer, permissions, cross-origin and cookie headers. Read-only; not an audit.", "type": "http", "serviceName": "Tanod sitepeek", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1791364949/bazaar-icons/d8143c9bc952f5cd.png", "resourceType": "Beauty & Personal Care", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0x593857A4a4F619543ea12394137C3004ce841720", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "2000", "amountUsd": 0.002, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:137", "payTo": "0x593857A4a4F619543ea12394137C3004ce841720", "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", "amount": "2000", "amountUsd": 0.002, "maxTimeoutSeconds": 300 } ], "outputSchema": { "properties": { "example": { "properties": { "cookies": { "type": "object" }, "cross_origin": { "type": "object" }, "csp": { "type": "object" }, "deductions": { "items": { "properties": { "code": { "type": "string" }, "points": { "type": "integer" }, "reason": { "type": "string" } }, "required": [ "code", "points", "reason" ], "type": "object" }, "type": "array" }, "disclosure": { "type": "object" }, "final_url": { "type": "string" }, "grade": { "enum": [ "A", "B", "C", "D", "F" ], "type": "string" }, "hsts": { "type": "object" }, "https": { "type": "boolean" }, "note": { "type": "string" }, "permissions_policy": { "type": "object" }, "redirects": { "type": "array" }, "referrer_policy": { "type": "object" }, "score": { "maximum": 100, "minimum": 0, "type": "integer" }, "status": { "type": "integer" }, "untrusted_content": { "type": "boolean" }, "upgraded_to_https": { "type": "boolean" }, "url": { "type": "string" }, "x_content_type_options": { "type": "object" }, "x_frame_options": { "type": "object" } }, "required": [ "url", "final_url", "status", "https", "score", "grade", "deductions", "note", "untrusted_content" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "body": { "url": "https://github.com" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "cookies": { "count": 3, "items": [ { "host_prefix": false, "httponly": true, "name": "_gh_sess", "samesite": "Lax", "secure": true, "secure_prefix": false }, { "host_prefix": false, "httponly": false, "name": "_octo", "samesite": "Lax", "secure": true, "secure_prefix": false } ], "truncated": false }, "cross_origin": { "embedder_policy": null, "opener_policy": null, "resource_policy": null }, "csp": { "directives": [ "base-uri", "child-src", "connect-src", "default-src", "font-src", "form-action", "frame-ancestors", "frame-src", "img-src", "manifest-src", "media-src", "script-src", "style-src", "upgrade-insecure-requests", "worker-src" ], "frame_ancestors": "'none'", "missing_directives": [], "object_src_restricted": true, "policies": 1, "present": true, "report_only": false, "scripts_restricted": true, "unsafe_eval": false, "unsafe_inline": false, "value": "default-src 'none'; base-uri 'self'; child-src github.githubassets.com ...", "wildcard_sources": false }, "deductions": [ { "code": "permissions_policy_missing", "points": 5, "reason": "no Permissions-Policy header" }, { "code": "cookie_not_httponly", "points": 5, "reason": "1 cookie(s) without HttpOnly (fine only if scripts must read them)" } ], "disclosure": { "server": "github.com", "x_aspnet_version": null, "x_powered_by": null }, "final_url": "https://github.com", "grade": "A", "hsts": { "include_subdomains": true, "max_age": 31536000, "preload": true, "preload_eligible": true, "present": true, "valid": true, "value": "max-age=31536000; includeSubdomains; preload" }, "https": true, "note": "one response's headers only; pages, APIs and error responses of the same site can differ", "permissions_policy": { "present": false, "value": null }, "redirects": [], "referrer_policy": { "effective": "strict-origin-when-cross-origin", "note": null, "value": "origin-when-cross-origin, strict-origin-when-cross-origin" }, "score": 90, "status": 200, "untrusted_content": true, "upgraded_to_https": false, "url": "https://github.com", "x_content_type_options": { "valid": true, "value": "nosniff" }, "x_frame_options": { "valid": true, "value": "DENY" } }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "url": { "description": "Public http(s) URL whose response headers are graded (the final response after redirects).", "maxLength": 2048, "minLength": 1, "type": "string" } }, "required": [ "url" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "cookies": { "type": "object" }, "cross_origin": { "type": "object" }, "csp": { "type": "object" }, "deductions": { "items": { "properties": { "code": { "type": "string" }, "points": { "type": "integer" }, "reason": { "type": "string" } }, "required": [ "code", "points", "reason" ], "type": "object" }, "type": "array" }, "disclosure": { "type": "object" }, "final_url": { "type": "string" }, "grade": { "enum": [ "A", "B", "C", "D", "F" ], "type": "string" }, "hsts": { "type": "object" }, "https": { "type": "boolean" }, "note": { "type": "string" }, "permissions_policy": { "type": "object" }, "redirects": { "type": "array" }, "referrer_policy": { "type": "object" }, "score": { "maximum": 100, "minimum": 0, "type": "integer" }, "status": { "type": "integer" }, "untrusted_content": { "type": "boolean" }, "upgraded_to_https": { "type": "boolean" }, "url": { "type": "string" }, "x_content_type_options": { "type": "object" }, "x_frame_options": { "type": "object" } }, "required": [ "url", "final_url", "status", "https", "score", "grade", "deductions", "note", "untrusted_content" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } }, "builder-code": { "info": { "a": "bc_h7pxv14u" }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "additionalProperties": false, "properties": { "a": { "description": "App builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "s": { "description": "Service builder codes", "items": { "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "maxItems": 11, "type": "array" }, "w": { "description": "Wallet builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" } }, "type": "object" } } }, "tags": [ "sitepeek", "render", "markdown", "pdf", "ocr", "bazaar", "builder-code" ], "sourceHost": "tanod.dev", "lastUpdated": "2026-10-08T21:16:22.335Z", "quality": { "calls30d": 2, "uniquePayers30d": 2, "lastCalledAt": "2026-10-08T21:16:21.892Z" }, "metadata": { "serviceName": "Tanod sitepeek", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1791364949/bazaar-icons/d8143c9bc952f5cd.png", "extensions": { "bazaar": { "info": { "input": { "body": { "url": "https://github.com" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "cookies": { "count": 3, "items": [ { "host_prefix": false, "httponly": true, "name": "_gh_sess", "samesite": "Lax", "secure": true, "secure_prefix": false }, { "host_prefix": false, "httponly": false, "name": "_octo", "samesite": "Lax", "secure": true, "secure_prefix": false } ], "truncated": false }, "cross_origin": { "embedder_policy": null, "opener_policy": null, "resource_policy": null }, "csp": { "directives": [ "base-uri", "child-src", "connect-src", "default-src", "font-src", "form-action", "frame-ancestors", "frame-src", "img-src", "manifest-src", "media-src", "script-src", "style-src", "upgrade-insecure-requests", "worker-src" ], "frame_ancestors": "'none'", "missing_directives": [], "object_src_restricted": true, "policies": 1, "present": true, "report_only": false, "scripts_restricted": true, "unsafe_eval": false, "unsafe_inline": false, "value": "default-src 'none'; base-uri 'self'; child-src github.githubassets.com ...", "wildcard_sources": false }, "deductions": [ { "code": "permissions_policy_missing", "points": 5, "reason": "no Permissions-Policy header" }, { "code": "cookie_not_httponly", "points": 5, "reason": "1 cookie(s) without HttpOnly (fine only if scripts must read them)" } ], "disclosure": { "server": "github.com", "x_aspnet_version": null, "x_powered_by": null }, "final_url": "https://github.com", "grade": "A", "hsts": { "include_subdomains": true, "max_age": 31536000, "preload": true, "preload_eligible": true, "present": true, "valid": true, "value": "max-age=31536000; includeSubdomains; preload" }, "https": true, "note": "one response's headers only; pages, APIs and error responses of the same site can differ", "permissions_policy": { "present": false, "value": null }, "redirects": [], "referrer_policy": { "effective": "strict-origin-when-cross-origin", "note": null, "value": "origin-when-cross-origin, strict-origin-when-cross-origin" }, "score": 90, "status": 200, "untrusted_content": true, "upgraded_to_https": false, "url": "https://github.com", "x_content_type_options": { "valid": true, "value": "nosniff" }, "x_frame_options": { "valid": true, "value": "DENY" } }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "url": { "description": "Public http(s) URL whose response headers are graded (the final response after redirects).", "maxLength": 2048, "minLength": 1, "type": "string" } }, "required": [ "url" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "cookies": { "type": "object" }, "cross_origin": { "type": "object" }, "csp": { "type": "object" }, "deductions": { "items": { "properties": { "code": { "type": "string" }, "points": { "type": "integer" }, "reason": { "type": "string" } }, "required": [ "code", "points", "reason" ], "type": "object" }, "type": "array" }, "disclosure": { "type": "object" }, "final_url": { "type": "string" }, "grade": { "enum": [ "A", "B", "C", "D", "F" ], "type": "string" }, "hsts": { "type": "object" }, "https": { "type": "boolean" }, "note": { "type": "string" }, "permissions_policy": { "type": "object" }, "redirects": { "type": "array" }, "referrer_policy": { "type": "object" }, "score": { "maximum": 100, "minimum": 0, "type": "integer" }, "status": { "type": "integer" }, "untrusted_content": { "type": "boolean" }, "upgraded_to_https": { "type": "boolean" }, "url": { "type": "string" }, "x_content_type_options": { "type": "object" }, "x_frame_options": { "type": "object" } }, "required": [ "url", "final_url", "status", "https", "score", "grade", "deductions", "note", "untrusted_content" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } }, "builder-code": { "info": { "a": "bc_h7pxv14u" }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "additionalProperties": false, "properties": { "a": { "description": "App builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "s": { "description": "Service builder codes", "items": { "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "maxItems": 11, "type": "array" }, "w": { "description": "Wallet builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" } }, "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "tanod.dev", "manifest_name": "tanod.dev", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "example": { "cookies": {}, "cross_origin": {}, "csp": {}, "deductions": [ { "code": "string", "points": 0, "reason": "string" } ], "disclosure": {}, "final_url": "string", "grade": "A", "hsts": {}, "https": true, "note": "string", "permissions_policy": {}, "redirects": [ "value" ], "referrer_policy": {}, "score": 0, "status": 0, "untrusted_content": true, "upgraded_to_https": true, "url": "string", "x_content_type_options": {}, "x_frame_options": {} }, "type": "string" } }