{"partialResults":false,"resources":[{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"merchant":"x402Atlas","name":"USD Coin","tier":"standard","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"amount":"10000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"merchant":"x402Atlas","name":"USD Coin","tier":"standard","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"amount":"10000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"merchant":"x402Atlas","name":"USD Coin","tier":"standard","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"amount":"10000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","merchant":"x402Atlas","tier":"standard"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ","scheme":"exact"}],"description":"Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.","extensions":{"bazaar":{"category":"domain-intelligence","info":{"input":{"method":"GET","queryParams":{"url":"https://example.com/"},"type":"http"},"output":{"example":{"headers":{"content_security_policy":"default-src 'self'","permissions_policy":null,"referrer_policy":"strict-origin-when-cross-origin","server":null,"strict_transport_security":{"include_subdomains":true,"max_age":31536000,"preload":false,"value":"max-age=31536000; includeSubDomains"},"x_content_type_options":"nosniff","x_frame_options":"DENY","x_powered_by":null},"queried_at":"2026-07-03T12:00:00Z","status_code":200,"url":"https://example.com/","warnings":["no Permissions-Policy header (powerful browser features are not restricted)"]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"url":{"description":"Absolute http/https URL to audit. Host must be a hostname (not an IP literal), not \"localhost\", and not under a reserved suffix (.local, .internal, .localdomain, .lan, .test). Non-default ports must be allowlisted. Redirects are not followed.","format":"uri","type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"headers":{"description":"Graded, normalized security headers. Each field is null when the header is absent from the response","properties":{"content_security_policy":{"type":["string","null"]},"permissions_policy":{"type":["string","null"]},"referrer_policy":{"type":["string","null"]},"server":{"description":"Server header value, if disclosed by the target","type":["string","null"]},"strict_transport_security":{"properties":{"include_subdomains":{"type":"boolean"},"max_age":{"description":"Parsed max-age in seconds; null if absent or unparseable","type":["integer","null"]},"preload":{"type":"boolean"},"value":{"description":"Raw Strict-Transport-Security header value","type":"string"}},"type":["object","null"]},"x_content_type_options":{"type":["string","null"]},"x_frame_options":{"type":["string","null"]},"x_powered_by":{"description":"X-Powered-By header value, if disclosed by the target","type":["string","null"]}},"type":"object"},"queried_at":{"description":"UTC timestamp the audit was performed","format":"date-time","type":"string"},"status_code":{"description":"HTTP status code returned by the target for the HEAD request","type":"integer"},"url":{"description":"The audited URL, exactly as given","type":"string"},"warnings":{"description":"Human-readable posture advisories, e.g. missing or weak headers","items":{"type":"string"},"type":"array"}},"required":["url","status_code","queried_at","headers","warnings"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"tags":["http","headers","security","hsts","csp","x-frame-options","posture"]}},"lastUpdated":"2026-10-30T17:04:17.053Z","quality":{"l30DaysTotalCalls":23,"l30DaysUniquePayers":17,"lastCalledAt":"2026-10-30T17:04:16.915Z"},"resource":"https://headers.use.x402atlas.com/","serviceName":"HTTP Security Headers Check","tags":["http","headers","security","hsts","csp"],"type":"http","x402Version":2},{"accepts":[{"amount":"1000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x5deaebaf98034cc0d9abe3757a440b121c42ef0a","scheme":"exact"}],"description":"Inspect HTTP response headers before an agent trusts or integrates a URL: content type, cache controls, CORS, HSTS, CSP, framing, referrer, permissions policy, server, ETag, and last-modified.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"target":"example.com"},"type":"http"},"output":{"example":{"headers":{"content-type":"text/html"},"ok":true,"status":200,"target":"example.com"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"properties":{"target":{"description":"Public HTTP(S) URL or hostname, e.g. example.com","type":"string"}},"required":["target"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-08T21:14:17.661Z","quality":{"l30DaysTotalCalls":3,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-08T21:14:17.399Z"},"resource":"https://pennyregwatch.com/v1/headers","serviceName":"PennyAPI HTTP Header Inspector","tags":["http-headers","cors","security-headers","cache","developer-tools"],"type":"http","x402Version":2},{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A","scheme":"exact"}],"description":"Fetch a URL (following redirects) and return the final response's HTTP headers, the server banner and content-type, plus a security-header audit reporting HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and the cross-origin policies (with the missing ones listed). No body is downloaded or parsed.","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://example.com"},"bodyType":"json","method":"POST","type":"http"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"url":{"description":"Public http(s) URL to fetch. Private/loopback/link-local addresses are rejected.","format":"uri","maxLength":2048,"type":"string"}},"required":["url"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-29T18:12:16.934Z","quality":{"l30DaysTotalCalls":11,"l30DaysUniquePayers":6,"lastCalledAt":"2026-10-29T18:12:16.664Z"},"resource":"https://web.openverbs.com/v1/headers","serviceName":"Inspect HTTP response headers","tags":["http headers lookup","response headers api","check security headers","hsts csp inspector","server header check"],"type":"http","x402Version":2},{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xE9740820225B3918b4ddd1292C7cA4Ca0e2C2F08","scheme":"exact"},{"amount":"10000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"8ugAWAXDB8V18kiUrGZTq1oMvU3C6Fxs8hfC6rvzQT3b","scheme":"exact"}],"description":"Sends a request to a web address you provide and reports back everything the server said in response: the status code, all the response headers, how many times it got redirected, and how long the whole thing took.","extensions":{"bazaar":{"info":{"input":{"body":{"follow_redirects":true,"method":"GET","url":"https://example.com"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"api_version":"1.0.0","final_url":"https://example.com/","headers":{"cache-control":"max-age=600","content-length":"1256","content-type":"text/html; charset=UTF-8","server":"nginx"},"missing_security_headers":["strict-transport-security","content-security-policy"],"redirect_chain":[{"status_code":301,"url":"http://example.com"}],"response_time_ms":214,"status_code":200,"url":"https://example.com"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"follow_redirects":{"description":"Whether to follow redirects to their final destination or stop at the first one","type":"boolean"},"method":{"description":"Either GET or HEAD; GET fetches the page normally, HEAD only asks for headers without the body","type":"string"},"url":{"description":"The full web address to check, including http:// or https://","type":"string"}},"required":["url"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"api_version":{"type":"string"},"final_url":{"type":"string"},"headers":{"additionalProperties":true,"type":"object"},"missing_security_headers":{"items":{"type":"string"},"type":"array"},"redirect_chain":{"items":{"type":"object"},"type":"array"},"response_time_ms":{"type":"integer"},"status_code":{"type":"integer"},"url":{"type":"string"}},"required":["api_version","url","final_url","status_code","redirect_chain","headers","missing_security_headers","response_time_ms"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-08T05:33:37.648Z","quality":{"l30DaysTotalCalls":2,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-08T05:33:37.436Z"},"resource":"https://http-header-checker.underscoredone.com/check","serviceName":"HTTP Header Checker","tags":["http headers","response headers","headers","inspect http headers","server headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x2074C40346Ae2A90e0E4A391bceE6F16BF5277f5","scheme":"exact"},{"amount":"10000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0x2074C40346Ae2A90e0E4A391bceE6F16BF5277f5","scheme":"exact"},{"amount":"10000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0x2074C40346Ae2A90e0E4A391bceE6F16BF5277f5","scheme":"exact"},{"amount":"10000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"82wfSCZhCmZA7zwqqt6Q3FG8nqYBwUvbThP6M97fa9Q6","scheme":"exact"}],"description":"Security headers check, HTTP. Fetch a public URL and grade its HTTP security headers: HSTS, Content-Security-Policy, framing protection, nosniff, Referrer-Policy and Permissions-Policy, plus version leaks (Server, X-Powered-By) and cookies missing Secure, HttpOnly or SameSite. Returns a grade A-F, a score and each check with its value. Use to review a site's basic web security; for DNS and email records use domain. Private hosts are refused with 400, uncharged.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"url":"https://example.com"},"type":"http"},"output":{"example":{"checks":[{"header":"strict-transport-security","note":"missing: browsers may load the site over plain HTTP","status":"fail","value":null}],"finalUrl":"https://example.com/","grade":"C","score":60,"status":200,"url":"https://example.com"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"url":{"description":"Public http(s) URL to check","examples":["https://example.com"],"type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"checks":{"items":{"properties":{"header":{"type":"string"},"note":{"type":"string"},"status":{"type":"string"},"value":{}},"type":"object"},"type":"array"},"finalUrl":{"type":"string"},"grade":{"type":"string"},"score":{"type":"number"},"status":{"type":"number"},"url":{"type":"string"}},"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}},"builder-code":{"info":{"a":"bc_09e30bdm"},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"a":{"description":"App builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"},"s":{"description":"Service builder codes","items":{"pattern":"^[a-z0-9_]{1,32}$","type":"string"},"maxItems":11,"type":"array"},"w":{"description":"Wallet builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"}},"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1792567527/bazaar-icons/a67d2da18841a325.png","lastUpdated":"2026-10-25T12:08:08.101Z","quality":{"l30DaysTotalCalls":5,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-25T12:08:07.976Z"},"resource":"https://agent-data-tools.revmesh2074.workers.dev/http/security-headers","serviceName":"Security headers check, HTTP","tags":["security-headers","http-headers","security","http","headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"1000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","outputSchema":{"properties":{"finalUrl":{"type":"string"},"headers":{"properties":{"content-type":{"type":"string"}},"type":"object"},"latencyMs":{"type":"integer"},"status":{"type":"integer"},"up":{"type":"boolean"}},"required":["up","status","latencyMs","finalUrl","headers"],"type":"object"},"payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0x754704Bc059F8C67012fEd69BC8A327a5aafb603","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:143","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:43114","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0xe15fC38F6D8c56aF07bbCBe3BAf5708A2Bf42392","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:1329","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"2000","asset":"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:10","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"5000","asset":"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168","extra":{"name":"Global Dollar","version":"1"},"maxTimeoutSeconds":300,"network":"eip155:4663","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0xcebA9300f2b948710d2653dD7B07f33A8B32118C","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42220","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0x3600000000000000000000000000000000000000","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:5042","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"assetTransferMethod":"permit2","facilitatorAddress":"0x14fDa13953Fc30428938E6BF950d036e77214e52","name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"upto"},{"amount":"1000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"BENrLoUbndxoNMUS5JXApGMtNykLjFXXixMtpDwDR9SP"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"J7aN3PLJnTCF5qpEnvJHJsnCjcGuqC2rYtEM8Gv3xwg","scheme":"exact"},{"amount":"10000","asset":"CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75","extra":{"areFeesSponsored":true},"maxTimeoutSeconds":300,"network":"stellar:pubnet","payTo":"GDNJXCKW7ZM7GEEVP674TWPU26YJNBQ2FI4ZIPRKTPTNUEJMDHFJWWRL","scheme":"exact"},{"amount":"1000","asset":"31566704","extra":{"feePayer":"ZMFK2OI7ZBD2U27ISERZC4S6LKM6WMFJPZQ4MYNJDZ2VNBNMBA67RA22AA","tag":"x402-global-challenge"},"maxTimeoutSeconds":300,"network":"algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=","payTo":"C7IIHG7SPLPZ5H7ZT6HW3UV2OQMQQE6Y2HBNGZXSLRJULE42BEE2OY2XIE","scheme":"exact"},{"amount":"1000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:8453","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"1000","asset":"0x3600000000000000000000000000000000000000","extra":{"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:5042","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"}],"description":"Check any public URL: status code, latency, final URL after redirects, and response headers. The uptime primitive for agent monitors.","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://agent402.tools"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"finalUrl":"https://agent402.tools/","headers":{"content-type":"text/html; charset=utf-8"},"latencyMs":87,"status":200,"up":true},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"method":{"description":"GET (default) or HEAD","type":"string"},"url":{"description":"Public http(s) URL","type":"string"}},"required":["url"]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"finalUrl":{"type":"string"},"headers":{"properties":{"content-type":{"type":"string"}},"type":"object"},"latencyMs":{"type":"integer"},"status":{"type":"integer"},"up":{"type":"boolean"}},"required":["up","status","latencyMs","finalUrl","headers"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}},"builder-code":{"info":{"a":"bc_b4aw4uzd"},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"a":{"description":"App builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"},"s":{"description":"Service builder codes","items":{"pattern":"^[a-z0-9_]{1,32}$","type":"string"},"maxItems":11,"type":"array"},"w":{"description":"Wallet builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"}},"type":"object"}},"payment-identifier":{"info":{"required":false},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"id":{"maxLength":128,"minLength":16,"pattern":"^[a-zA-Z0-9_-]+$","type":"string"},"required":{"type":"boolean"}},"required":["required"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784247360/bazaar-icons/478aced8e219894c.png","lastUpdated":"2026-10-27T11:58:24.694Z","quality":{"l30DaysTotalCalls":10,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-27T11:58:24.496Z"},"resource":"https://agent402.tools/api/http-check","serviceName":"HTTP check","tags":["network","uptime","monitoring","http","headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x5b32c973596078a967562ca652761404f19be0e9","scheme":"exact"},{"amount":"10000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"BjY98A6dS3GGLZdz2zHy8wK7XAwnQgNhCc66mfmBTRPz","scheme":"exact"},{"amount":"0.01","asset":"524C555344000000000000000000000000000000","extra":{"areFeesSponsored":false,"issuer":"rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De"},"maxTimeoutSeconds":300,"network":"xrpl:0","payTo":"r3FbirL83RAB2CwnUdxE5pCohMkuo6LQcf","scheme":"exact"},{"amount":"10000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0x5b32c973596078a967562ca652761404f19be0e9","scheme":"exact"}],"description":"HTTP request proxy API for public URLs: GET url (optional method GET/POST/HEAD/PUT/PATCH/DELETE; headers JSON), or POST JSON {url, method, headers, body}. Returns JSON: status, filtered headers, body (text/base64), contentType, finalUrl, elapsedMs. Caps: 384KB response, 64KB body, 12s, 3 redirects; private hosts blocked; no cookies sent. Upstream 4xx/5xx come back as data (charged); proxy errors are not. Returned content is untrusted third-party data.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"method":"GET","url":"https://example.com"},"type":"http"},"output":{"example":{"body":"\u003c!doctype html\u003e\u003chtml lang=en\u003e\u003chead\u003e\u003cmeta charset=utf-8\u003e\u003clink rel=icon href=data:,\u003e\u003cmeta name=viewport content=\"width=dev…","bodyEncoding":"text","bytesRead":713,"contentType":"text/html; charset=utf-8","elapsedMs":10,"finalUrl":"https://example.com/","headers":{"content-type":"text/html; charset=utf-8","last-modified":"Mon, 28 Sep 2026 16:19:32 GMT","server":"cloudflare"},"ok":true,"status":200,"truncated":false},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"body":{"description":"Not read on GET. To send a request body (POST/PUT/PATCH upstream), call POST /api/http with a JSON body {url, method, headers, body}. Size-capped (64KB).","type":"string"},"headers":{"description":"Optional allowlisted outbound headers as a URL-encoded JSON object string, e.g. {\"accept\":\"application/json\"} (no Cookie / Host / hop-by-hop).","type":"string"},"method":{"description":"Upstream method: GET (default) | POST | HEAD | PUT | PATCH | DELETE","type":"string"},"url":{"description":"Absolute http(s) URL (required). Private/localhost blocked.","type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"description":"Horizon Pulse universal HTTP proxy result. The example is a trimmed real response recorded from GET /api/demo/http at 2026-10-01T14:36Z UTC; live values differ on every call.","type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790623595/bazaar-icons/2ff6a4fc61cbe047.png","lastUpdated":"2026-10-19T10:09:40.79Z","quality":{"l30DaysTotalCalls":4,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-19T10:09:40.573Z"},"resource":"https://horizonpulse.dev/api/http","serviceName":"Horizon Pulse","tags":["web","http-proxy","api-call","request","headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","outputSchema":{"properties":{"fetchedAt":{"type":"string"},"finalUrl":{"type":"string"},"headers":{"type":"object"},"httpVersion":{},"redirected":{"type":"boolean"},"security":{"type":"object"},"status":{"type":"integer"},"statusText":{"type":"string"},"url":{"type":"string"}},"required":["url","finalUrl","status","statusText","redirected","headers","security","fetchedAt"],"type":"object"},"payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0x754704Bc059F8C67012fEd69BC8A327a5aafb603","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:143","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:43114","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0xe15fC38F6D8c56aF07bbCBe3BAf5708A2Bf42392","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:1329","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"4000","asset":"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:10","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"5000","asset":"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168","extra":{"name":"Global Dollar","version":"1"},"maxTimeoutSeconds":300,"network":"eip155:4663","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0xcebA9300f2b948710d2653dD7B07f33A8B32118C","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42220","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0x3600000000000000000000000000000000000000","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:5042","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"assetTransferMethod":"permit2","facilitatorAddress":"0x14fDa13953Fc30428938E6BF950d036e77214e52","name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"upto"},{"amount":"3000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"BENrLoUbndxoNMUS5JXApGMtNykLjFXXixMtpDwDR9SP"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"J7aN3PLJnTCF5qpEnvJHJsnCjcGuqC2rYtEM8Gv3xwg","scheme":"exact"},{"amount":"30000","asset":"CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75","extra":{"areFeesSponsored":true},"maxTimeoutSeconds":300,"network":"stellar:pubnet","payTo":"GDNJXCKW7ZM7GEEVP674TWPU26YJNBQ2FI4ZIPRKTPTNUEJMDHFJWWRL","scheme":"exact"},{"amount":"3000","asset":"31566704","extra":{"feePayer":"ZMFK2OI7ZBD2U27ISERZC4S6LKM6WMFJPZQ4MYNJDZ2VNBNMBA67RA22AA","tag":"x402-global-challenge"},"maxTimeoutSeconds":300,"network":"algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=","payTo":"C7IIHG7SPLPZ5H7ZT6HW3UV2OQMQQE6Y2HBNGZXSLRJULE42BEE2OY2XIE","scheme":"exact"},{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:8453","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"},{"amount":"3000","asset":"0x3600000000000000000000000000000000000000","extra":{"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:5042","payTo":"0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0","scheme":"exact"}],"description":"Fetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP/COEP. Scores 0–100 by presence, flags weak HSTS, and warns on Server/X-Powered-By identity leaks. SSRF-protected.","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://agent402.tools"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"fetchedAt":"2026-06-19T22:00:00.000Z","finalUrl":"https://agent402.tools/","headers":{"content-type":"text/html; charset=utf-8","server":"railway-hikari","x-content-type-options":"nosniff"},"httpVersion":null,"redirected":false,"security":{"findings":[{"header":"HSTS","present":true,"value":"max-age=63072000; includeSubDomains; preload"},{"header":"XCTO","present":true,"value":"nosniff"}],"score":100,"warnings":["info: Server header names the platform (railway-hikari); also visible from DNS, low value to hide"]},"status":200,"statusText":"OK","url":"https://agent402.tools/"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"method":{"description":"GET or HEAD (default GET)","type":"string"},"url":{"description":"Public http(s) URL to probe","type":"string"}},"required":["url"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"fetchedAt":{"type":"string"},"finalUrl":{"type":"string"},"headers":{"type":"object"},"httpVersion":{},"redirected":{"type":"boolean"},"security":{"type":"object"},"status":{"type":"integer"},"statusText":{"type":"string"},"url":{"type":"string"}},"required":["url","finalUrl","status","statusText","redirected","headers","security","fetchedAt"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}},"builder-code":{"info":{"a":"bc_b4aw4uzd"},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"a":{"description":"App builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"},"s":{"description":"Service builder codes","items":{"pattern":"^[a-z0-9_]{1,32}$","type":"string"},"maxItems":11,"type":"array"},"w":{"description":"Wallet builder code","pattern":"^[a-z0-9_]{1,32}$","type":"string"}},"type":"object"}},"payment-identifier":{"info":{"required":false},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"id":{"maxLength":128,"minLength":16,"pattern":"^[a-zA-Z0-9_-]+$","type":"string"},"required":{"type":"boolean"}},"required":["required"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784423094/bazaar-icons/478aced8e219894c.png","lastUpdated":"2026-10-27T11:49:47.126Z","quality":{"l30DaysTotalCalls":10,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-27T11:49:46.779Z"},"resource":"https://agent402.tools/api/http-headers","serviceName":"HTTP headers + security analysis","tags":["network","security","headers","audit","hsts"],"type":"http","x402Version":2},{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"},{"amount":"3000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"},{"amount":"3000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"}],"description":"Fetch a URL's HTTP response headers with the full redirect chain, status, server, caching and a security grade (A-F) based on HSTS, CSP, X-Frame-Options and other headers, listing what is missing. Use for security reviews, redirect debugging or SEO checks.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"url":"https://stripe.com"},"type":"http"},"output":{"example":{"cache_control":null,"content_type":"text/html; charset=utf-8","final_url":"https://stripe.com","headers":{"connection":"keep-alive","content-encoding":"gzip","content-security-policy":"base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...","content-type":"text/html; charset=utf-8","cross-origin-opener-policy":"same-origin-allow-popups; report-to=\"wsp_coop\"","cross-origin-opener-policy-report-only":"same-origin-allow-popups; report-to=\"wsp_coop\"","date":"Thu, 22 Oct 2026 06:45:11 GMT","referrer-policy":"no-referrer-when-downgrade","report-to":"{\"group\":\"coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report\"}],\"include_subdomains\":true}, {\"group\":\"wsp_coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\"}],\"include_subdomains\":true...","reporting-endpoints":"coop=\"https://q.stripe.com/coop-report\", wsp_coop=\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", wsp_coep=\"https://q.stripe.com/coep-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", csp=\"https://q.stripe.com/csp-repor...","server":"nginx","set-cookie":"cid=407dcab3-4cf7-3e75-862d-15bf5d72f327; Path=/; Domain=stripe.com; Max-Age=7776000; Secure; SameSite=Lax","strict-transport-security":"max-age=63072000; includeSubDomains; preload","transfer-encoding":"chunked","x-content-type-options":"nosniff","x-frame-options":"SAMEORIGIN","x-mkt-cache":"HIT","x-stripe-proxy-response":"upstream","x-stripe-server-rpc-duration-micros":"65156","x-wc":"3ff"},"https":true,"powered_by":null,"redirects":[],"security":{"grade":"A","insecure_cookies":1,"missing":["permissions-policy"],"present":{"content-security-policy":"base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...","cross-origin-opener-policy":"same-origin-allow-popups; report-to=\"wsp_coop\"","referrer-policy":"no-referrer-when-downgrade","strict-transport-security":"max-age=63072000; includeSubDomains; preload","x-content-type-options":"nosniff","x-frame-options":"SAMEORIGIN"},"score":90},"server":"nginx","status":200,"url":"https://stripe.com"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"properties":{"url":{"description":"URL or domain","type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-27T05:08:31.666Z","quality":{"l30DaysTotalCalls":3,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-27T05:08:31.444Z"},"resource":"https://bess-x402.onrender.com/v1/web/headers","serviceName":"HTTP Headers \u0026 Security Grade","tags":["security","http","headers","redirects","seo"],"type":"http","x402Version":2},{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf","scheme":"exact"},{"amount":"3000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"HcjfmZLgWRZzwj4deEiS7pewc4KBYSw39mW5nTyt3pz2","scheme":"exact"},{"amount":"3000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf","scheme":"exact"},{"amount":"3000","asset":"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","extra":{"assets":[{"address":"0x0b2c639c533813f4aa9d7837caf62653d097ff85","authorizationVersions":["1","2"],"decimals":6,"symbol":"USDC"}],"minValiditySeconds":604800,"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:10","payTo":"0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf","scheme":"exact"},{"amount":"3000","asset":"0x3600000000000000000000000000000000000000","extra":{"assets":[{"address":"0x3600000000000000000000000000000000000000","authorizationVersions":["1","2"],"decimals":6,"symbol":"USDC"}],"minValiditySeconds":604800,"name":"GatewayWalletBatched","verifyingContract":"0x77777777dcc4d5a8b6e418fd04d8997ef11000ee","version":"1"},"maxTimeoutSeconds":604900,"network":"eip155:5042","payTo":"0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf","scheme":"exact"},{"amount":"0.003","asset":"524C555344000000000000000000000000000000","extra":{"areFeesSponsored":false,"invoiceId":"6CA2E068E90E45989576C9618B103F60","issuer":"rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De","sourceTag":804681468},"maxTimeoutSeconds":300,"network":"xrpl:0","payTo":"rEac5rTEr7y81iEyrMTrHCRbnktSE2pNCp","scheme":"exact"},{"amount":"2310","asset":"XRP","extra":{"areFeesSponsored":false,"invoiceId":"943F72651B514AF6A22E79E408E95BC7","sourceTag":804681468},"maxTimeoutSeconds":300,"network":"xrpl:0","payTo":"rEac5rTEr7y81iEyrMTrHCRbnktSE2pNCp","scheme":"exact"}],"description":"Technical inspection of a URL: status, redirects, time to first byte and total time, bytes, compression, content type, cache policy, server, CDN, cookies set, security headers present and all response headers.","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://github.com"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"bytes_transferred":117330,"cache_control":"max-age=0, private, must-revalidate","cdn":null,"code":200,"compression":"gzip","content_type":"text/html; charset=utf-8","cookies":["_gh_sess","_octo"],"etag":true,"headers":{"accept-ranges":"bytes","cache-control":"max-age=0, private, must-revalidate","content-encoding":"gzip","content-language":"en-US","content-security-policy":"default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazona…","content-type":"text/html; charset=utf-8","date":"Fri, 02 Oct 2026 16:30:56 GMT","etag":"W/\"f5927ebefa94d7b7c704363775d026a9\"","referrer-policy":"origin-when-cross-origin, strict-origin-when-cross-origin","server":"github.com","set-cookie":"_gh_sess=FtpXJflRwzWWLBj5ITkvuGi7%2F3dD0cM4CdYBXQGU9NgjhOFskxjkkzfFm1edKFFzojtmR8BZf%2BU31znZqmyKL54V%2FTF603fhH7QShHG38nZPftF7nviYfq5HkAVkXBml%2BFDu59%2F3y9QT7qY3ev1oyg9U6Fa8D48ptba%2BObanKOLVj7Q8CRvDJ2p837UeUzR1iMCSA2dDwvexx5%2FL%2FKQHDzXYpXHfhZ9kNcQhJ4dNnMyxObA79XphdhFnsU5xSY3bzaqsHyAwwlmVeHTj%2F…","strict-transport-security":"max-age=31536000; includeSubdomains; preload","transfer-encoding":"chunked","vary":"X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, X-GitHub-Client-Version, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With","x-content-type-options":"nosniff","x-frame-options":"deny","x-github-edge-region":"fra","x-github-request-id":"711F:6C8A6:14090F4:1331E12:6ABFDC41","x-xss-protection":"0"},"redirects":0,"security_headers":{"content-security-policy":true,"permissions-policy":false,"referrer-policy":true,"strict-transport-security":true,"x-content-type-options":true,"x-frame-options":true},"server":"github.com","time_to_first_byte_ms":168,"total_time_ms":255,"url_final":"https://github.com/"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"url":{"type":"string"}},"required":["url"]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"bytes_transferred":{"type":["number","null"]},"cache_control":{"type":["string","null"]},"cdn":{},"code":{"type":["number","null"]},"compression":{"type":["string","null"]},"content_type":{"type":["string","null"]},"cookies":{"items":{"type":["null","string"]},"type":["array","null"]},"etag":{"type":["boolean","null"]},"headers":{"properties":{"accept-ranges":{"type":["string","null"]},"cache-control":{"type":["string","null"]},"content-encoding":{"type":["string","null"]},"content-language":{"type":["string","null"]},"content-security-policy":{"type":["string","null"]},"content-type":{"type":["string","null"]},"date":{"type":["string","null"]},"etag":{"type":["string","null"]},"referrer-policy":{"type":["string","null"]},"server":{"type":["string","null"]},"set-cookie":{"type":["string","null"]},"strict-transport-security":{"type":["string","null"]},"transfer-encoding":{"type":["string","null"]},"vary":{"type":["string","null"]},"x-content-type-options":{"type":["string","null"]},"x-frame-options":{"type":["string","null"]},"x-github-edge-region":{"type":["string","null"]},"x-github-request-id":{"type":["string","null"]},"x-xss-protection":{"type":["string","null"]}},"type":["object","null"]},"redirects":{"type":["number","null"]},"security_headers":{"properties":{"content-security-policy":{"type":["boolean","null"]},"permissions-policy":{"type":["boolean","null"]},"referrer-policy":{"type":["boolean","null"]},"strict-transport-security":{"type":["boolean","null"]},"x-content-type-options":{"type":["boolean","null"]},"x-frame-options":{"type":["boolean","null"]}},"type":["object","null"]},"server":{"type":["string","null"]},"time_to_first_byte_ms":{"type":["number","null"]},"total_time_ms":{"type":["number","null"]},"url_final":{"type":["string","null"]}},"type":["object","null"]},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-21T03:47:10.984Z","quality":{"l30DaysTotalCalls":5,"l30DaysUniquePayers":4,"lastCalledAt":"2026-10-21T03:47:10.724Z"},"resource":"https://api.vextorium.com/v1/url-inspect","serviceName":"HTTP inspector | Vextorium","tags":["http","headers","performance","cdn","devtools"],"type":"http","x402Version":2},{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":120,"network":"eip155:8453","payTo":"0x4a82F147c8A4339409C9097Adc1EedFd56E85bFE","scheme":"exact"},{"amount":"10000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"},"maxTimeoutSeconds":120,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"Bs3oEYkvpbzdaLN8KuCHHATfaifmSp7iLUsKBCFQyvhL","scheme":"exact"}],"description":"Queries target URL headers to score security configurations (HSTS, CSP, X-Frame-Options).","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://google.com"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"confidence":"high","data_as_of":"2026-06","disclaimer":"Informational support only. Not legal, tax, medical, veterinary, or financial advice. Verify with the cited official source or a qualified professional before acting.","result":{"headers":{"csp":false,"hsts":true},"score":80},"supported":true,"warnings":[]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"url":{"description":"URL to parse","type":"string"}},"required":["url"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1783444544/bazaar-icons/103a33ef34cfecae.png","lastUpdated":"2026-10-27T09:48:02.066Z","quality":{"l30DaysTotalCalls":4,"l30DaysUniquePayers":4,"lastCalledAt":"2026-10-27T09:48:01.481Z"},"resource":"https://codepulse-api.hahavoid0.workers.dev/security/http-headers","serviceName":"CodePulse Agentic API","tags":["security","headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"2000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"J8vnmBx4pS1X7UUBTfz1yWBKiw69Dj2yRGRHDaXBRdhR","scheme":"exact"},{"amount":"2000","asset":"0x3600000000000000000000000000000000000000","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:5042","payTo":"0xa4751fCAa83c9669cfe507bb6807507729839be3","scheme":"exact"},{"amount":"2000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"0x754704Bc059F8C67012fEd69BC8A327a5aafb603","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:143","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:480","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:10","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"2000","asset":"0xcebA9300f2b948710d2653dD7B07f33A8B32118C","extra":{"name":"USDC","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42220","payTo":"0xb8491F953e6860D3b5840b73c60883Ff099ceAfA","scheme":"exact"},{"amount":"20000","asset":"CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75","extra":{"areFeesSponsored":true},"maxTimeoutSeconds":300,"network":"stellar:pubnet","payTo":"GBIX2M7HNL2G2VYU5KZ446OSN55ZWHS3WBEUP4JTLS6R34VXIGTDOAFI","scheme":"exact"},{"amount":"0.002","asset":"524C555344000000000000000000000000000000","extra":{"areFeesSponsored":false,"invoiceId":"e368ccf8-2c4e-43c6-8821-f2cffb67e0b8","issuer":"rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De","sourceTag":804681468},"maxTimeoutSeconds":300,"network":"xrpl:0","payTo":"rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ","scheme":"exact"},{"amount":"1550","asset":"XRP","extra":{"areFeesSponsored":false,"invoiceId":"33138261-2c43-4410-a842-93bae1beeff1","sourceTag":804681468},"maxTimeoutSeconds":300,"network":"xrpl:0","payTo":"rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ","scheme":"exact"}],"description":"Checks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy. Returns present/missing headers with their values and a score out of 7. It does not judge the quality of the values.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"domain":"wikipedia.org"},"type":"http"},"output":{"example":{"checkedAt":"2026-10-23T09:38:33.527Z","domain":"wikipedia.org","finalUrl":"https://www.wikipedia.org/","httpStatus":200,"maxScore":7,"missing":["content-security-policy","x-content-type-options"],"present":{"strict-transport-security":"max-age=106384710; includeSubDomains; preload"},"score":1,"source":"https://wikipedia.org/"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"domain":{"description":"Domain name such as wikipedia.org (required)","type":"string"}},"required":["domain"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-24T03:23:06.652Z","quality":{"l30DaysTotalCalls":2,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-24T03:23:06.509Z"},"resource":"https://api.webintel-api.workers.dev/api/security/security-headers","serviceName":"SiteCheck Web Intel","tags":["security","headers"],"type":"http","x402Version":2},{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x5bE2bE9f95549A2D69951d24A2B3901D1df1Bc05","scheme":"exact"}],"description":"Follow a site's redirect chains from http:// and https:// and read the security headers of the final HTTPS response: HSTS with preload readiness, Content-Security-Policy with unsafe-inline detection, X-Content-Type-Options, frame protection, Referrer-Policy and cookie flags (never values). Use when an agent must tell whether a site forces HTTPS, why HSTS preload fails or which headers are missing.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"domain":"example.com"},"type":"http"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"additionalProperties":false,"properties":{"domain":{"examples":["example.com"],"maxLength":1024,"minLength":1,"title":"Domain","type":"string"}},"required":["domain"],"title":"DomainInput","type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-27T12:40:00.032Z","quality":{"l30DaysTotalCalls":1,"l30DaysUniquePayers":1,"lastCalledAt":"2026-10-27T12:39:59.746Z"},"resource":"https://api.lookproof.dev/v1/http/security-headers","serviceName":"Lookproof","tags":["http","https","hsts","csp","security"],"type":"http","x402Version":2},{"accepts":[{"amount":"4500","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":60,"network":"eip155:8453","payTo":"0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","scheme":"exact"},{"amount":"4500","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F","name":"USDC","version":"1"},"maxTimeoutSeconds":60,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","scheme":"exact"}],"description":"Fetch a URL and grade its HTTP security headers. Pass url (scheme optional — defaults to https). Returns an overall letter grade + score, the list of present/missing headers, and a per-header analysis with the live value and specific issues for: Strict-Transport-Security (HSTS max-age/includeSubDomains), Content-Security-Policy (flags 'unsafe-inline'/'unsafe-eval'/missing default-src), X-Frame-Options or CSP frame-ancestors (clickjacking), X-Content-Type-Options (nosniff), Referrer-Policy, Permissions-Policy, and Cross-Origin-Opener/Resource-Policy. Also flags Server/X-Powered-By info disclosure. Analyzed from the target's LIVE response headers through an SSRF-guarded fetch (private/loopback targets refused) — an LLM cannot see a site's current headers. For web-app security review, vendor assessment, and CI gates.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"url":"https://example.com"},"type":"http"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"properties":{"method":{"const":"GET"},"queryParams":{"properties":{"url":{"description":"URL to analyze (scheme optional).","type":"string"}},"required":["url"]},"type":{"const":"http"}},"required":["type","method","queryParams"],"type":"object"}},"required":["input"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1781454341/bazaar-icons/58f7ba8f2b3b8047.png","lastUpdated":"2026-10-08T06:13:46.25Z","quality":{"l30DaysTotalCalls":4,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-08T06:13:46.085Z"},"resource":"https://2s.io/api/security/http-headers","serviceName":"2s","tags":["public-records","identifiers","ai-agents","us-gov-data","x402"],"type":"http","x402Version":2}],"searchMethod":"hybrid","x402Version":2,"meta":{"searchToken":"5zljosegienvmaa"}}