# CSS Form Action Extractor (SSRF-safe)

> CSS Form Action Extractor (SSRF-safe) is a paid API for AI agents from agentshelf.syntexa.ch, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-02).

Extracts the form action URL from a public webpage or raw HTML using CSS selectors, with SSRF protection.

## Facts

- Endpoint: POST https://agentshelf.syntexa.ch/v1/css-form-action?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-02
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/css-form-action-extractor-ssrf-safe-6d83acad
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0P5tJo2JBZEqQQ7rPtB7D

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability css-form-action-extractor-ssrf-safe-6d83acad -d '<json body>'
```

Example prompt: Can you extract the form action URL from this page — https://example.com/contact — so I know where the form submits to?

## When to prefer this

Use this endpoint when you need to programmatically discover the submission target of an HTML form from a public URL or raw HTML, especially when SSRF safety is required. Prefer the free sandbox endpoint /v1/sandbox/css-form-action for testing. Choose this paid endpoint for production use where reliability and SSRF protection matter.

## Known failure modes

- No form element found in the HTML — returns an error or empty result
- URL is unreachable or returns non-200 status
- SSRF protection blocks internal/private IP addresses or localhost URLs
- HTML exceeds the 200,000 character maximum
- URL exceeds the 2,048 character maximum
- Malformed HTML prevents CSS selector from matching
- Multiple forms present — may return only the first match

## How this service works

Call when an agent needs form actions via form[action] from a public page or HTML (SSRF-safe). Exact $0.009 USDC. Prefer unpaid POST /v1/sandbox/css-form-action first.

## Output

Returns the value of the form[action] attribute found in the provided page URL or raw HTML, giving the agent the URL to which the form submits.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 8,
   "description": "Public page to fetch. The selector or profile is fixed by the SKU. Provide url or html."
  },
  "html": {
   "type": "string",
   "examples": [
    "<!doctype html><html lang=\"en\"><head><title>Hello</title>\n<meta charset=\"utf-8\"><meta name=\"description\" content=\"Desc\">\n<link rel=\"canonical\" href=\"https://example.com/\"><link rel=\"icon\" href=\"/favicon.ico\">\n</head><body><h1>Hello</h1><a href=\"https://example.com/a\">A</a></body></html>"
   ],
   "maxLength": 200000,
   "minLength": 1,
   "description": "HTML to extract from locally. Provide html or url. When both are set, html is used."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/css-form-action-extractor-ssrf-safe-6d83acad/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentshelf.syntexa.ch](https://www.zero.xyz/host/agentshelf.syntexa.ch/llms.txt)