{"api":"v1","generated_at":"2026-09-15T23:45:05.303Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/headers-use-x402atlas-com-fe52e1","pinned_page":"https://tollindex.com/e/headers-use-x402atlas-com-fe52e1/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"headers-use-x402atlas-com-fe52e1","canonical_url":"https://headers.use.x402atlas.com/","resource":"https://headers.use.x402atlas.com/","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.","service_name":"HTTP Security Headers Check","declared_category":"domain-intelligence","declared_tags":["http","headers","security","hsts","csp","x-frame-options","posture"],"route_template":null,"registry_updated":"2026-09-15T06:30:10.352Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"headers.use.x402atlas.com","category":"other","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"eip155:137","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"registry":"cdp","ordinal":2,"network":"eip155:42161","asset":"0xaf88d065e77c8cc2239327c5edb3a432268e5831","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","scheme":"exact"},{"registry":"cdp","ordinal":3,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":14,"unique_payers_30d":9,"last_called_at":"2026-09-15T06:30:10.136Z"},"validation":{"latest":{"observed_at":"2026-09-15T07:09:15.977Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T07:09:15.977Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T06:35:13.715Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T06:24:07.526Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T13:57:26.930Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T14:54:45.250Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","page":"https://tollindex.com/seller/0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","endpoints":1,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["http","headers","security","hsts","csp"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","tier":"standard","version":"2","merchant":"x402Atlas"},"payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},{"asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","tier":"standard","version":"2","merchant":"x402Atlas"},"payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","amount":"10000","scheme":"exact","network":"eip155:137","maxTimeoutSeconds":300},{"asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","tier":"standard","version":"2","merchant":"x402Atlas"},"payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","amount":"10000","scheme":"exact","network":"eip155:42161","maxTimeoutSeconds":300},{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"tier":"standard","feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","merchant":"x402Atlas"},"payTo":"ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-09-15T06:30:10.136Z","l30DaysTotalCalls":14,"l30DaysUniquePayers":9},"resource":"https://headers.use.x402atlas.com/","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"url":"https://example.com/"}},"output":{"type":"json","example":{"url":"https://example.com/","headers":{"server":null,"x_powered_by":null,"referrer_policy":"strict-origin-when-cross-origin","x_frame_options":"DENY","permissions_policy":null,"x_content_type_options":"nosniff","content_security_policy":"default-src 'self'","strict_transport_security":{"value":"max-age=31536000; includeSubDomains","max_age":31536000,"preload":false,"include_subdomains":true}},"warnings":["no Permissions-Policy header (powerful browser features are not restricted)"],"queried_at":"2026-07-03T12:00:00Z","status_code":200}}},"tags":["http","headers","security","hsts","csp","x-frame-options","posture"],"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","format":"uri","description":"Absolute http/https URL to audit. Host must be a hostname (not an IP literal), not \"localhost\", and not under a reserved suffix (.local, .internal, .localdomain, .lan, .test). Non-default ports must be allowlisted. Redirects are not followed."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["url","status_code","queried_at","headers","warnings"],"properties":{"url":{"type":"string","description":"The audited URL, exactly as given"},"headers":{"type":"object","properties":{"server":{"type":["string","null"],"description":"Server header value, if disclosed by the target"},"x_powered_by":{"type":["string","null"],"description":"X-Powered-By header value, if disclosed by the target"},"referrer_policy":{"type":["string","null"]},"x_frame_options":{"type":["string","null"]},"permissions_policy":{"type":["string","null"]},"x_content_type_options":{"type":["string","null"]},"content_security_policy":{"type":["string","null"]},"strict_transport_security":{"type":["object","null"],"properties":{"value":{"type":"string","description":"Raw Strict-Transport-Security header value"},"max_age":{"type":["integer","null"],"description":"Parsed max-age in seconds; null if absent or unparseable"},"preload":{"type":"boolean"},"include_subdomains":{"type":"boolean"}}}},"description":"Graded, normalized security headers. Each field is null when the header is absent from the response"},"warnings":{"type":"array","items":{"type":"string"},"description":"Human-readable posture advisories, e.g. missing or weak headers"},"queried_at":{"type":"string","format":"date-time","description":"UTC timestamp the audit was performed"},"status_code":{"type":"integer","description":"HTTP status code returned by the target for the HEAD request"}}}}}}},"category":"domain-intelligence"}},"description":"Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.","lastUpdated":"2026-09-15T06:30:10.352Z","serviceName":"HTTP Security Headers Check","x402Version":2}]}}