# CMS Detection Confidence Audit

> CMS Detection Confidence Audit is a paid API for AI agents from cms.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-11-01).

Passively audits a public URL or domain to evaluate CMS detection evidence, returning a verdict with observation, threshold, evidence source, limitations, and a recommended action.

## Facts

- Endpoint: POST https://cms.halowerk.com/v1/cms-detection-audit?utm_source=zero.xyz
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-01
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cms-detection-confidence-audit-3cbbe9ef
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_M5v_quszo0U7CIGdawnuc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cms-detection-confidence-audit-3cbbe9ef -d '<json body>'
```

Example prompt: Can you run a passive CMS detection audit on https://www.example.com and tell me what evidence you find, the confidence verdict, and what action you'd recommend?

## When to prefer this

Choose this endpoint when you need a passive, safe, read-only CMS fingerprint check on a public URL with a structured confidence verdict and evidence citation — especially when you need to audit without any login, payload injection, or load testing. Prefer it over generic web scraping when you want an opinionated verdict with threshold scoring and actionable recommendations rather than raw HTML.

## Known failure modes

- Target URL is unreachable or returns a non-200 status — audit cannot proceed
- Private or authenticated sites block all public evidence — detection confidence will be low or indeterminate
- Highly customized or headless CMS deployments may produce inconclusive verdicts
- Malformed or too-short target input rejected by schema validation
- Rate limits or upstream network errors cause the request to fail

## How this service works

CMS detection confidence audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

## Output

Returns a structured audit result containing the observed public evidence, the detection confidence threshold, a pass/fail verdict, the exact evidence source URL or signal, known limitations of the check, and a mode-specific recommended action — all without any active exploitation or login attempt.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "target": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 3,
   "description": "Public HTTP(S) URL or domain to inspect. A bare domain is normalized to HTTPS."
  },
  "context": {
   "type": "object",
   "description": "Optional non-secret correlation labels returned unchanged only in the request lifecycle.",
   "maxProperties": 12,
   "additionalProperties": {
    "type": [
     "string",
     "number",
     "boolean",
     "null"
    ]
   }
  },
  "baseline": {
   "type": [
    "object",
    "null"
   ],
   "description": "Optional baseline returned by a previous snapshot call.",
   "additionalProperties": true
  },
  "compare_url": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 3,
   "description": "Optional public comparison URL. Used by change and monitoring services."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cms-detection-confidence-audit-3cbbe9ef/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cms.halowerk.com](https://www.zero.xyz/host/cms.halowerk.com/llms.txt)