# Cian Endpoint Health Audit

> Cian Endpoint Health Audit is a paid API for AI agents from cian-x402.netlify.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-29).

Audits a public HTTP URL for status, redirect chain, latency percentiles, TLS certificate health, security headers, and detected anomalies

## Facts

- Endpoint: GET https://cian-x402.netlify.app/v1/audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cian-endpoint-health-audit-def25bf1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_u4CEy4gI93etkzeVQ1fAa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cian-endpoint-health-audit-def25bf1
```

Example prompt: Can you run a full health and security audit on https://api.myapp.com — I want to see the redirect chain, TLS cert expiry, latency p50/p95, and any anomalies like missing HSTS, CSP, or CORS wildcard issues?

## When to prefer this

Use this endpoint when you need a comprehensive one-shot security and performance audit of a single public HTTP endpoint, especially when you want both header/TLS security analysis and latency percentiles in a single call. Prefer this over generic uptime monitors when you need anomaly detection (HSTS, CSP, CORS, cookie flags, version disclosure) rather than just a status check.

## Known failure modes

- Target URL resolves to a private, loopback, or link-local address — request refused for security
- URL is unreachable or times out — latency metrics unavailable
- TLS handshake failure — certificate details not retrievable
- Malformed URL input — validation error returned
- Redirect loop detected and reported as an anomaly rather than followed indefinitely

## How this service works

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are refused.

## Output

Returns HTTP status code and redirect chain, p50/p95 latency measurements from repeated samples, TLS certificate expiry date and issuer, relevant response headers, and a list of detected anomalies including missing HSTS/CSP/X-Content-Type-Options, expiring certificate, weak TLS, CORS wildcard, insecure cookies, server version disclosure, slow p95 response times, and redirect loops. Private, loopback, and link-local addresses are refused.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "discoverable"
   ],
   "properties": {
    "type": {
     "const": "http"
    },
    "method": {
     "const": "GET"
    },
    "headers": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    "queryParams": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    "discoverable": {
     "const": true
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cian-endpoint-health-audit-def25bf1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cian-x402.netlify.app](https://www.zero.xyz/host/cian-x402.netlify.app/llms.txt)