# AgentPayStore Endpoint Security Audit

> AgentPayStore Endpoint Security Audit is a paid API for AI agents from agentpaystore.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-14).

Audits one or more domains for HTTP security headers, CORS policy, CSP gaps, SSL configuration, and threat intelligence signals.

## Facts

- Endpoint: GET https://agentpaystore.com/sentry/api/query
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentpaystore-endpoint-security-audit-c22d7484
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2Z9YLvvwTHNs2EQyyAnt5

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentpaystore-endpoint-security-audit-c22d7484
```

Example prompt: Can you run a full security audit on example.com — check its HTTP headers, CORS policy, CSP gaps, and SSL configuration, and flag any threat intel issues?

## When to prefer this

Choose this endpoint when you need a quick, multi-dimensional web security posture check across HTTP headers, CORS, CSP, and SSL for one or more domains in a single call. It is especially useful for pre-launch audits, compliance checks, or when an AI agent needs to programmatically assess endpoint security hygiene without setting up a full scanner. Prefer this over manual curl-based header inspection or full penetration testing tools when breadth-of-coverage and speed matter more than exhaustive vulnerability discovery.

## Known failure modes

- Domain unreachable or does not resolve — endpoint may return empty or error results for that domain
- Invalid domain format in the domains array — may cause validation error or skipped entry
- SSL handshake failure for sites with severely broken TLS — may return partial data
- Rate limiting or repeated session abuse — may result in 402 or rejection
- Empty domains array — likely returns an error or empty result set

## How this service works

Senior cybersecurity analyst. Findings with severity, impact, remediation and MITRE ATT&CK mapping, across 754 skills and 26 domains. Live CVE and breach news in context.

## Output

A structured security report per domain covering: HTTP response header analysis (presence and values of security headers like HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), CORS policy assessment (allowed origins, methods, credentials), Content Security Policy gap analysis (missing directives, unsafe sources), SSL/TLS configuration details (protocol versions, cipher suites, certificate validity), and any associated threat intelligence findings.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "reply": {
   "type": "string"
  },
  "domains": {
   "type": "array",
   "items": {
    "type": "string"
   }
  },
  "session_id": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentpaystore-endpoint-security-audit-c22d7484/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentpaystore.com](https://www.zero.xyz/host/agentpaystore.com/llms.txt)