# billitright.co CASA Cybersecurity Full Assessment Runner

> billitright.co CASA Cybersecurity Full Assessment Runner is a paid API for AI agents from billitright.co, paid per call via x402, $0.15/call, status unknown (last checked 2026-10-19).

Runs a comprehensive CASA cybersecurity assessment combining functional compliance, performance validation, web security findings, and transport security checks against a target URL.

## Facts

- Endpoint: POST https://billitright.co/run-ucp-test?utm_source=zero.xyz
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/billitright-co-casa-cybersecurity-full-assessment-runner-3c52ca35
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nTXB6Q2BzMS7S30B0IH1i

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability billitright-co-casa-cybersecurity-full-assessment-runner-3c52ca35 -d '<json body>'
```

Example prompt: Run a full CASA cybersecurity assessment on https://api.myservice.com using the REST binding and give me the combined report covering compliance, performance, web security, and transport security.

## When to prefer this

Use this endpoint when you need a single, all-in-one CASA cybersecurity assessment that combines functional compliance, performance, web security, and transport security into one report. Prefer this over the individual sibling endpoints when you want a holistic security posture snapshot rather than a focused sub-domain analysis. Especially useful for pre-launch audits, compliance sign-offs, or broad security sweeps where running each sub-assessment separately would be inefficient.

## Known failure modes

- Target URL is unreachable or returns errors during assessment
- Invalid or missing target_url causes schema validation failure
- Access token rejected by target service leading to partial or failed assessment
- Assessment times out if target service is too slow or unresponsive
- Invalid binding enum value causes request rejection
- Target URL is not a publicly accessible endpoint

## How this service works

Password - CASA Cybersecurity Assessment - Runs the full assessment combining functional compliance, performance validation, web security findings, and transport security.

## Output

A combined cybersecurity assessment report covering: functional compliance with UCP standards, performance and availability validation, web security findings (HTTP headers, etc.), and transport security configuration — all merged into a single structured output object.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "files": {
   "type": "object"
  },
  "binding": {
   "enum": [
    "rest",
    "mcp"
   ],
   "type": "string"
  },
  "target_url": {
   "type": "string",
   "format": "uri"
  },
  "access_token": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/billitright-co-casa-cybersecurity-full-assessment-runner-3c52ca35/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from billitright.co](https://www.zero.xyz/host/billitright.co/llms.txt)