{
  "x402Version": 2,
  "id": 55574,
  "slug": "55574",
  "resource": "https://agentshelf.syntexa.ch/v1/security-headers",
  "description": "Call when an agent needs a security-header audit (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy) with a 0–100 score for a public URL. Use it before sending users to a site. SSRF-safe. Send JSON {\"url\":\"https://example.com/\"}. Exact $0.004 USDC on Base. Try unpaid POST /v1/sandbox/security-headers first.",
  "type": "http",
  "resourceType": "Security",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x1D61FAA032d3f40D9C470D2bf3A3f53De0E55a38",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "4000",
      "amountUsd": 0.004,
      "maxTimeoutSeconds": 60
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "additionalProperties": false,
        "examples": [
          {
            "billed": true,
            "final_url": "https://example.com/",
            "findings": [
              {
                "message": "Content-Security-Policy is present",
                "name": "content-security-policy",
                "status": "pass"
              },
              {
                "message": "HSTS max-age is at least 180 days",
                "name": "strict-transport-security",
                "status": "pass"
              },
              {
                "message": "X-Frame-Options is DENY or SAMEORIGIN",
                "name": "x-frame-options",
                "status": "pass"
              },
              {
                "message": "Referrer-Policy is set",
                "name": "referrer-policy",
                "status": "pass"
              },
              {
                "message": "Permissions-Policy is present",
                "name": "permissions-policy",
                "status": "pass"
              }
            ],
            "headers": {
              "content_security_policy": "default-src 'self'",
              "permissions_policy": "geolocation=()",
              "referrer_policy": "no-referrer",
              "strict_transport_security": "max-age=31536000; includeSubDomains",
              "x_frame_options": "DENY"
            },
            "ok": true,
            "receipt_id": "rcpt_01EXAMPLE000000000000000",
            "score": 100,
            "status": 200,
            "warnings": []
          }
        ],
        "properties": {
          "billed": {
            "examples": [
              true
            ],
            "type": "boolean"
          },
          "final_url": {
            "examples": [
              "https://example.com/"
            ],
            "type": "string"
          },
          "findings": {
            "examples": [
              [
                {
                  "message": "Content-Security-Policy is present",
                  "name": "content-security-policy",
                  "status": "pass"
                },
                {
                  "message": "HSTS max-age is at least 180 days",
                  "name": "strict-transport-security",
                  "status": "pass"
                },
                {
                  "message": "X-Frame-Options is DENY or SAMEORIGIN",
                  "name": "x-frame-options",
                  "status": "pass"
                },
                {
                  "message": "Referrer-Policy is set",
                  "name": "referrer-policy",
                  "status": "pass"
                },
                {
                  "message": "Permissions-Policy is present",
                  "name": "permissions-policy",
                  "status": "pass"
                }
              ]
            ],
            "items": {
              "additionalProperties": false,
              "properties": {
                "message": {
                  "type": "string"
                },
                "name": {
                  "type": "string"
                },
                "status": {
                  "enum": [
                    "pass",
                    "warn",
                    "missing"
                  ],
                  "type": "string"
                }
              },
              "required": [
                "name",
                "status",
                "message"
              ],
              "type": "object"
            },
            "type": "array"
          },
          "headers": {
            "additionalProperties": false,
            "examples": [
              {
                "content_security_policy": "default-src 'self'",
                "permissions_policy": "geolocation=()",
                "referrer_policy": "no-referrer",
                "strict_transport_security": "max-age=31536000; includeSubDomains",
                "x_frame_options": "DENY"
              }
            ],
            "properties": {
              "content_security_policy": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "permissions_policy": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "referrer_policy": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "strict_transport_security": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "x_frame_options": {
                "type": [
                  "string",
                  "null"
                ]
              }
            },
            "required": [
              "content_security_policy",
              "strict_transport_security",
              "x_frame_options",
              "referrer_policy",
              "permissions_policy"
            ],
            "type": "object"
          },
          "ok": {
            "const": true,
            "examples": [
              true
            ],
            "type": "boolean"
          },
          "receipt_id": {
            "examples": [
              "rcpt_01EXAMPLE000000000000000"
            ],
            "type": "string"
          },
          "score": {
            "examples": [
              100
            ],
            "maximum": 100,
            "minimum": 0,
            "type": "integer"
          },
          "status": {
            "examples": [
              200
            ],
            "type": "integer"
          },
          "warnings": {
            "default": [],
            "examples": [
              []
            ],
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "ok",
          "receipt_id",
          "billed",
          "final_url",
          "status",
          "headers",
          "findings",
          "score"
        ],
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "url": "https://example.com/"
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "billed": true,
            "final_url": "https://example.com/",
            "findings": [
              {
                "message": "Content-Security-Policy is present",
                "name": "content-security-policy",
                "status": "pass"
              },
              {
                "message": "HSTS max-age is at least 180 days",
                "name": "strict-transport-security",
                "status": "pass"
              },
              {
                "message": "X-Frame-Options is DENY or SAMEORIGIN",
                "name": "x-frame-options",
                "status": "pass"
              },
              {
                "message": "Referrer-Policy is set",
                "name": "referrer-policy",
                "status": "pass"
              },
              {
                "message": "Permissions-Policy is present",
                "name": "permissions-policy",
                "status": "pass"
              }
            ],
            "headers": {
              "content_security_policy": "default-src 'self'",
              "permissions_policy": "geolocation=()",
              "referrer_policy": "no-referrer",
              "strict_transport_security": "max-age=31536000; includeSubDomains",
              "x_frame_options": "DENY"
            },
            "ok": true,
            "receipt_id": "rcpt_01EXAMPLE000000000000000",
            "score": 100,
            "status": 200,
            "warnings": []
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "additionalProperties": false,
                "examples": [
                  {
                    "url": "https://example.com/"
                  }
                ],
                "properties": {
                  "url": {
                    "description": "Public http(s) URL whose CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy headers are audited.",
                    "examples": [
                      "https://example.com/"
                    ],
                    "maxLength": 2048,
                    "minLength": 8,
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "additionalProperties": false,
                "examples": [
                  {
                    "billed": true,
                    "final_url": "https://example.com/",
                    "findings": [
                      {
                        "message": "Content-Security-Policy is present",
                        "name": "content-security-policy",
                        "status": "pass"
                      },
                      {
                        "message": "HSTS max-age is at least 180 days",
                        "name": "strict-transport-security",
                        "status": "pass"
                      },
                      {
                        "message": "X-Frame-Options is DENY or SAMEORIGIN",
                        "name": "x-frame-options",
                        "status": "pass"
                      },
                      {
                        "message": "Referrer-Policy is set",
                        "name": "referrer-policy",
                        "status": "pass"
                      },
                      {
                        "message": "Permissions-Policy is present",
                        "name": "permissions-policy",
                        "status": "pass"
                      }
                    ],
                    "headers": {
                      "content_security_policy": "default-src 'self'",
                      "permissions_policy": "geolocation=()",
                      "referrer_policy": "no-referrer",
                      "strict_transport_security": "max-age=31536000; includeSubDomains",
                      "x_frame_options": "DENY"
                    },
                    "ok": true,
                    "receipt_id": "rcpt_01EXAMPLE000000000000000",
                    "score": 100,
                    "status": 200,
                    "warnings": []
                  }
                ],
                "properties": {
                  "billed": {
                    "examples": [
                      true
                    ],
                    "type": "boolean"
                  },
                  "final_url": {
                    "examples": [
                      "https://example.com/"
                    ],
                    "type": "string"
                  },
                  "findings": {
                    "examples": [
                      [
                        {
                          "message": "Content-Security-Policy is present",
                          "name": "content-security-policy",
                          "status": "pass"
                        },
                        {
                          "message": "HSTS max-age is at least 180 days",
                          "name": "strict-transport-security",
                          "status": "pass"
                        },
                        {
                          "message": "X-Frame-Options is DENY or SAMEORIGIN",
                          "name": "x-frame-options",
                          "status": "pass"
                        },
                        {
                          "message": "Referrer-Policy is set",
                          "name": "referrer-policy",
                          "status": "pass"
                        },
                        {
                          "message": "Permissions-Policy is present",
                          "name": "permissions-policy",
                          "status": "pass"
                        }
                      ]
                    ],
                    "items": {
                      "additionalProperties": false,
                      "properties": {
                        "message": {
                          "type": "string"
                        },
                        "name": {
                          "type": "string"
                        },
                        "status": {
                          "enum": [
                            "pass",
                            "warn",
                            "missing"
                          ],
                          "type": "string"
                        }
                      },
                      "required": [
                        "name",
                        "status",
                        "message"
                      ],
                      "type": "object"
                    },
                    "type": "array"
                  },
                  "headers": {
                    "additionalProperties": false,
                    "examples": [
                      {
                        "content_security_policy": "default-src 'self'",
                        "permissions_policy": "geolocation=()",
                        "referrer_policy": "no-referrer",
                        "strict_transport_security": "max-age=31536000; includeSubDomains",
                        "x_frame_options": "DENY"
                      }
                    ],
                    "properties": {
                      "content_security_policy": {
                        "type": [
                          "string",
                          "null"
                        ]
                      },
                      "permissions_policy": {
                        "type": [
                          "string",
                          "null"
                        ]
                      },
                      "referrer_policy": {
                        "type": [
                          "string",
                          "null"
                        ]
                      },
                      "strict_transport_security": {
                        "type": [
                          "string",
                          "null"
                        ]
                      },
                      "x_frame_options": {
                        "type": [
                          "string",
                          "null"
                        ]
                      }
                    },
                    "required": [
                      "content_security_policy",
                      "strict_transport_security",
                      "x_frame_options",
                      "referrer_policy",
                      "permissions_policy"
                    ],
                    "type": "object"
                  },
                  "ok": {
                    "const": true,
                    "examples": [
                      true
                    ],
                    "type": "boolean"
                  },
                  "receipt_id": {
                    "examples": [
                      "rcpt_01EXAMPLE000000000000000"
                    ],
                    "type": "string"
                  },
                  "score": {
                    "examples": [
                      100
                    ],
                    "maximum": 100,
                    "minimum": 0,
                    "type": "integer"
                  },
                  "status": {
                    "examples": [
                      200
                    ],
                    "type": "integer"
                  },
                  "warnings": {
                    "default": [],
                    "examples": [
                      []
                    ],
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  }
                },
                "required": [
                  "ok",
                  "receipt_id",
                  "billed",
                  "final_url",
                  "status",
                  "headers",
                  "findings",
                  "score"
                ],
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "agentshelf.syntexa.ch",
  "lastUpdated": "2026-10-11T10:15:18.89Z",
  "quality": {
    "calls30d": 2,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-10-11T10:15:18.558Z"
  },
  "metadata": {
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "url": "https://example.com/"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "billed": true,
              "final_url": "https://example.com/",
              "findings": [
                {
                  "message": "Content-Security-Policy is present",
                  "name": "content-security-policy",
                  "status": "pass"
                },
                {
                  "message": "HSTS max-age is at least 180 days",
                  "name": "strict-transport-security",
                  "status": "pass"
                },
                {
                  "message": "X-Frame-Options is DENY or SAMEORIGIN",
                  "name": "x-frame-options",
                  "status": "pass"
                },
                {
                  "message": "Referrer-Policy is set",
                  "name": "referrer-policy",
                  "status": "pass"
                },
                {
                  "message": "Permissions-Policy is present",
                  "name": "permissions-policy",
                  "status": "pass"
                }
              ],
              "headers": {
                "content_security_policy": "default-src 'self'",
                "permissions_policy": "geolocation=()",
                "referrer_policy": "no-referrer",
                "strict_transport_security": "max-age=31536000; includeSubDomains",
                "x_frame_options": "DENY"
              },
              "ok": true,
              "receipt_id": "rcpt_01EXAMPLE000000000000000",
              "score": 100,
              "status": 200,
              "warnings": []
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "additionalProperties": false,
                  "examples": [
                    {
                      "url": "https://example.com/"
                    }
                  ],
                  "properties": {
                    "url": {
                      "description": "Public http(s) URL whose CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy headers are audited.",
                      "examples": [
                        "https://example.com/"
                      ],
                      "maxLength": 2048,
                      "minLength": 8,
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "additionalProperties": false,
                  "examples": [
                    {
                      "billed": true,
                      "final_url": "https://example.com/",
                      "findings": [
                        {
                          "message": "Content-Security-Policy is present",
                          "name": "content-security-policy",
                          "status": "pass"
                        },
                        {
                          "message": "HSTS max-age is at least 180 days",
                          "name": "strict-transport-security",
                          "status": "pass"
                        },
                        {
                          "message": "X-Frame-Options is DENY or SAMEORIGIN",
                          "name": "x-frame-options",
                          "status": "pass"
                        },
                        {
                          "message": "Referrer-Policy is set",
                          "name": "referrer-policy",
                          "status": "pass"
                        },
                        {
                          "message": "Permissions-Policy is present",
                          "name": "permissions-policy",
                          "status": "pass"
                        }
                      ],
                      "headers": {
                        "content_security_policy": "default-src 'self'",
                        "permissions_policy": "geolocation=()",
                        "referrer_policy": "no-referrer",
                        "strict_transport_security": "max-age=31536000; includeSubDomains",
                        "x_frame_options": "DENY"
                      },
                      "ok": true,
                      "receipt_id": "rcpt_01EXAMPLE000000000000000",
                      "score": 100,
                      "status": 200,
                      "warnings": []
                    }
                  ],
                  "properties": {
                    "billed": {
                      "examples": [
                        true
                      ],
                      "type": "boolean"
                    },
                    "final_url": {
                      "examples": [
                        "https://example.com/"
                      ],
                      "type": "string"
                    },
                    "findings": {
                      "examples": [
                        [
                          {
                            "message": "Content-Security-Policy is present",
                            "name": "content-security-policy",
                            "status": "pass"
                          },
                          {
                            "message": "HSTS max-age is at least 180 days",
                            "name": "strict-transport-security",
                            "status": "pass"
                          },
                          {
                            "message": "X-Frame-Options is DENY or SAMEORIGIN",
                            "name": "x-frame-options",
                            "status": "pass"
                          },
                          {
                            "message": "Referrer-Policy is set",
                            "name": "referrer-policy",
                            "status": "pass"
                          },
                          {
                            "message": "Permissions-Policy is present",
                            "name": "permissions-policy",
                            "status": "pass"
                          }
                        ]
                      ],
                      "items": {
                        "additionalProperties": false,
                        "properties": {
                          "message": {
                            "type": "string"
                          },
                          "name": {
                            "type": "string"
                          },
                          "status": {
                            "enum": [
                              "pass",
                              "warn",
                              "missing"
                            ],
                            "type": "string"
                          }
                        },
                        "required": [
                          "name",
                          "status",
                          "message"
                        ],
                        "type": "object"
                      },
                      "type": "array"
                    },
                    "headers": {
                      "additionalProperties": false,
                      "examples": [
                        {
                          "content_security_policy": "default-src 'self'",
                          "permissions_policy": "geolocation=()",
                          "referrer_policy": "no-referrer",
                          "strict_transport_security": "max-age=31536000; includeSubDomains",
                          "x_frame_options": "DENY"
                        }
                      ],
                      "properties": {
                        "content_security_policy": {
                          "type": [
                            "string",
                            "null"
                          ]
                        },
                        "permissions_policy": {
                          "type": [
                            "string",
                            "null"
                          ]
                        },
                        "referrer_policy": {
                          "type": [
                            "string",
                            "null"
                          ]
                        },
                        "strict_transport_security": {
                          "type": [
                            "string",
                            "null"
                          ]
                        },
                        "x_frame_options": {
                          "type": [
                            "string",
                            "null"
                          ]
                        }
                      },
                      "required": [
                        "content_security_policy",
                        "strict_transport_security",
                        "x_frame_options",
                        "referrer_policy",
                        "permissions_policy"
                      ],
                      "type": "object"
                    },
                    "ok": {
                      "const": true,
                      "examples": [
                        true
                      ],
                      "type": "boolean"
                    },
                    "receipt_id": {
                      "examples": [
                        "rcpt_01EXAMPLE000000000000000"
                      ],
                      "type": "string"
                    },
                    "score": {
                      "examples": [
                        100
                      ],
                      "maximum": 100,
                      "minimum": 0,
                      "type": "integer"
                    },
                    "status": {
                      "examples": [
                        200
                      ],
                      "type": "integer"
                    },
                    "warnings": {
                      "default": [],
                      "examples": [
                        []
                      ],
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    }
                  },
                  "required": [
                    "ok",
                    "receipt_id",
                    "billed",
                    "final_url",
                    "status",
                    "headers",
                    "findings",
                    "score"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "agentshelf.syntexa.ch",
    "manifest_name": "agentshelf.syntexa.ch",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "example": {
      "billed": true,
      "final_url": "https://example.com/",
      "findings": [
        {
          "message": "Content-Security-Policy is present",
          "name": "content-security-policy",
          "status": "pass"
        },
        {
          "message": "HSTS max-age is at least 180 days",
          "name": "strict-transport-security",
          "status": "pass"
        },
        {
          "message": "X-Frame-Options is DENY or SAMEORIGIN",
          "name": "x-frame-options",
          "status": "pass"
        },
        {
          "message": "Referrer-Policy is set",
          "name": "referrer-policy",
          "status": "pass"
        },
        {
          "message": "Permissions-Policy is present",
          "name": "permissions-policy",
          "status": "pass"
        }
      ],
      "headers": {
        "content_security_policy": "default-src 'self'",
        "permissions_policy": "geolocation=()",
        "referrer_policy": "no-referrer",
        "strict_transport_security": "max-age=31536000; includeSubDomains",
        "x_frame_options": "DENY"
      },
      "ok": true,
      "receipt_id": "rcpt_01EXAMPLE000000000000000",
      "score": 100,
      "status": 200,
      "warnings": []
    },
    "type": "string"
  }
}