{"api":"v1","generated_at":"2026-09-15T21:46:46.627Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/netintel-dev-security-headers-analyze-c5b114","pinned_page":"https://tollindex.com/e/netintel-dev-security-headers-analyze-c5b114/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"netintel-dev-security-headers-analyze-c5b114","canonical_url":"https://netintel.dev/security-headers/analyze","resource":"https://netintel.dev/security-headers/analyze","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).","service_name":"NetIntel","declared_category":null,"declared_tags":["security headers","http security","csp","website security","security audit"],"route_template":null,"registry_updated":"2026-08-20T15:34:31.477Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"security headers analyze","category":"other","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-08-20T15:34:31.233Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:29:18.561Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:29:18.561Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:58:33.281Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:50:46.906Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T08:07:58.272Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T12:05:53.324Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","page":"https://tollindex.com/seller/0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","endpoints":125,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["security headers","http security","csp","website security","security audit"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F"},"payTo":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png","quality":{"lastCalledAt":"2026-08-20T15:34:31.233Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://netintel.dev/security-headers/analyze","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"target":"https://example.com"}},"output":{"type":"json","example":{"meta":{"duration_ms":312},"grade":"B","score":78,"errors":[],"target":"https://example.com","results":{"headers":{"referrer-policy":{"reason":"Referrer-Policy is set to strict-origin-when-cross-origin","status":"pass","present":true,"raw_value":"strict-origin-when-cross-origin"},"x-frame-options":{"reason":"X-Frame-Options is set to DENY","status":"pass","present":true,"raw_value":"DENY"},"x-xss-protection":{"reason":"X-XSS-Protection not set — modern browsers use CSP instead","status":"info","present":false,"raw_value":null},"permissions-policy":{"reason":"Permissions-Policy not set — browser features not restricted","status":"warn","present":false,"raw_value":null},"x-content-type-options":{"reason":"X-Content-Type-Options is set to nosniff","status":"pass","present":true,"raw_value":"nosniff"},"content-security-policy":{"reason":"Content-Security-Policy is set with a strong policy","status":"pass","present":true,"raw_value":"default-src 'self'"},"strict-transport-security":{"reason":"HSTS enabled with max-age=31536000","status":"pass","present":true,"raw_value":"max-age=31536000; includeSubDomains"},"cross-origin-opener-policy":{"reason":"Cross-Origin-Opener-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-embedder-policy":{"reason":"Cross-Origin-Embedder-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-resource-policy":{"reason":"Cross-Origin-Resource-Policy not set","status":"info","present":false,"raw_value":null}},"summary":{"fail":0,"info":4,"pass":6,"warn":0},"final_url":"https://example.com/","status_code":200,"content_type":"text/html; charset=utf-8","anti_patterns":[{"header":"x-powered-by","reason":"Information leakage — reveals server framework","severity":"warn","raw_value":"Express"}]},"service":"security-headers","warnings":[],"timestamp":"2025-01-15T12:00:00.000Z","deductions":[{"points":-5,"reason":"Permissions-Policy not set"},{"points":-2,"reason":"Cross-Origin-Resource-Policy not set"},{"points":-2,"reason":"Cross-Origin-Embedder-Policy not set"},{"points":-2,"reason":"Cross-Origin-Opener-Policy not set"},{"points":-3,"reason":"X-Powered-By header exposes server framework"}]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"target":{"type":"string","description":"URL or domain to audit security headers for (e.g. https://example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"meta":{"type":"object"},"grade":{"type":"string"},"score":{"type":"number"},"errors":{"type":"array"},"target":{"type":"string"},"results":{"type":"object"},"service":{"type":"string"},"warnings":{"type":"array"},"timestamp":{"type":"string"},"deductions":{"type":"array"}}}}}}}}},"description":"Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).","lastUpdated":"2026-08-20T15:34:31.477Z","serviceName":"NetIntel","x402Version":2}]}}