Docs

HTTP Security Headers

Paid x402 API for AI agents that audits HTTP security headers, HSTS, Content-Security-Policy, X-Frame-Options, Referrer-Policy, Permissions-Policy and web security scan findings for a public URL.

Agent discoveryUse OpenAPI and the x402 catalog before calling paid endpoints.
openapi.jsonx402 catalogllms-full.txt

Call

Method
POST
URL
https://api.x402dataapi.com/v1/http-security
Price
0.002 USDC
Network
eip155:8453
TTL
1800s
Timeout
15000ms

Agent value

This endpoint returns structured JSON suitable for autonomous agents, scanners and workflow tools.

x402ai-agentshttp-securitysecurity-headershsts

Input schema

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "format": "uri",
      "description": "Public http or https URL to inspect"
    }
  },
  "required": [
    "url"
  ]
}

Input example

{
  "url": "https://example.com"
}

Output example

{
  "url": "https://example.com",
  "status": 200,
  "score": 80,
  "missing": []
}

curl

curl -X POST https://api.x402dataapi.com/v1/http-security \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

Payment behavior

Paid endpoints return HTTP 402 with payment requirements when called without a valid x402 payment signature.

curl -X POST https://api.x402dataapi.com/v1/http-security \
  -H "Content-Type: application/json" \
  -H "PAYMENT-SIGNATURE: <x402-payment-payload>" \
  -d '{"url":"https://example.com"}'