# HTTP Headers Inspector

> HTTP Headers Inspector is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Fetches and audits the HTTP response headers of a given URL, surfacing security, cache, redirect, and server signals.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/http-headers-inspect
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-delx-ai-189d045f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_m-za8rvdYzShtrdJzo1ot

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-delx-ai-189d045f -d '<json body>'
```

Example prompt: Can you inspect the HTTP response headers for https://example.com and tell me what security, cache, redirect, and server headers it's returning so I can audit it?

## When to prefer this

Use this endpoint when you need a fast, structured audit of HTTP response headers for a specific URL — especially for security posture checks (HSTS, CSP, X-Frame-Options), cache policy review, redirect chain inspection, or server fingerprinting. Prefer it over full site crawlers when only header-level intelligence is needed without body content.

## Known failure modes

- URL is unreachable or times out — returns an error with connection details
- Invalid or malformed URL input — returns a validation error
- Target server returns no headers or blocks the request — partial or empty header report
- DNS resolution failure for the given URL — returns a DNS error
- Non-HTTP/HTTPS URL provided — returns an unsupported scheme error

## How this service works

Inspect security, cache, redirect, and server headers to audit a URL quickly.

## Output

A structured report of the HTTP response headers returned by the target URL, categorized into security headers (e.g. HSTS, CSP, X-Frame-Options), cache directives, redirect signals, and server identity headers, enabling quick security and compliance auditing.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string"
  },
  "timeout": {
   "type": "integer",
   "maximum": 15,
   "minimum": 1
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "result": {
   "status": 200,
   "headers": {
    "server": "cloudflare",
    "cache-control": "max-age=0"
   },
   "final_url": "https://example.com",
   "missing_security_headers": [
    "content-security-policy",
    "referrer-policy"
   ],
   "security_headers_present": [
    "strict-transport-security",
    "x-content-type-options"
   ]
  },
  "tool_name": "util_http_headers_inspect"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-delx-ai-189d045f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)