# Login Surface Inspector

> Login Surface Inspector is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Inspects a website's login and authentication surface, detecting forms, reset flows, signup links, and security headers.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/login-surface-report
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-delx-ai-306a74de
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jh-gqwQ1fBGTepAYNzC6f

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-delx-ai-306a74de -d '<json body>'
```

Example prompt: Can you pull up the login surface report for https://example.com — I want to see what auth forms, password reset flows, signup links, and security headers are exposed there?

## When to prefer this

Use this endpoint when you need to quickly audit or map the authentication surface of a website — such as before a security review, competitive analysis, compliance check, or automated onboarding flow. It is particularly useful when you want structured signals about login forms, reset flows, signup links, and security headers without writing a custom scraper.

## Known failure modes

- Target URL is unreachable or returns a non-200 response
- URL has no detectable login or auth surface (returns empty signals)
- Site uses JavaScript-rendered auth that cannot be detected via static inspection
- Invalid or malformed URL provided
- Payment not included or insufficient — x402 payment required

## How this service works

Inspect login and auth surface signals such as forms, reset flows, signup links, and headers.

## Output

A structured report covering the detected login forms, signup links, password reset flows, authentication-related HTTP headers, and other surface-level auth signals found on the target URL or domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string"
  },
  "timeout": {
   "type": "integer",
   "maximum": 15,
   "minimum": 1
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "result": {
   "auth_link_count": 3,
   "password_form_count": 1,
   "security_headers_present": [
    "strict-transport-security"
   ]
  },
  "tool_name": "util_login_surface_report"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-delx-ai-306a74de/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)