78trust / 100

Header Security Check

by api.strale.io in Security & trust

x402 APIPassing, checked 1 h ago

Check HTTP response headers for security best practices: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns grade A-F.

GET https://api.strale.io/x402/header-security-check

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
275 ms typical, 328 ms slowest 5%
Last check
1 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://api.strale.io/x402/header-security-check"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.strale.io%2Fx402%2Fheader-security-check
const res = await pay("https://api.strale.io/x402/header-security-check");
console.log(await res.json());

Example input

{
  "url": {
    "required": true,
    "type": "string"
  }
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
1 h agoPassed402128 ms$0.054
4 h agoPassed402127 ms$0.054
8 h agoPassed402282 ms$0.054
12 h agoPassed402303 ms$0.054
15 h agoPassed402120 ms$0.054
19 h agoPassed402328 ms$0.054
22 h agoPassed402273 ms$0.054
26 h agoPassed402440 ms$0.054
30 h agoPassed402133 ms$0.054
33 h agoPassed402127 ms$0.054
38 h agoPassed402290 ms$0.054
41 h agoPassed402275 ms$0.054
46 h agoPassed402278 ms$0.054