79trust / 100

Headers

by PennyAPI HTTP Header Inspector in Security & trust

x402 APIPassing, checked 2 min ago

Inspect HTTP response headers before an agent trusts or integrates a URL: content type, cache controls, CORS, HSTS, CSP, framing, referrer, permissions policy, server, ETag, and last-modified.

GET https://pennyregwatch.com/v1/headers

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
317 ms typical, 656 ms slowest 5%
Last check
2 min ago
Next check
in 28 min

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://pennyregwatch.com/v1/headers?target=example.com"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fpennyregwatch.com%2Fv1%2Fheaders
const res = await pay("https://pennyregwatch.com/v1/headers?target=example.com");
console.log(await res.json());

Example input

{
  "target": "example.com"
}

Example output

{
  "headers": {
    "content-type": "text/html"
  },
  "ok": true,
  "status": 200,
  "target": "example.com"
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 min agoPassed402292 ms$0.001
4 h agoPassed402385 ms$0.001
7 h agoPassed402317 ms$0.001
11 h agoPassed402405 ms$0.001
15 h agoPassed402371 ms$0.001
18 h agoPassed402656 ms$0.001
23 h agoPassed402301 ms$0.001
26 h agoPassed402302 ms$0.001
29 h agoPassed402758 ms$0.001
34 h agoPassed402304 ms$0.001