# Delx Cookie Policy Audit

> Delx Cookie Policy Audit is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Audits a Set-Cookie header value for the presence and correctness of Secure, HttpOnly, and SameSite security controls, returning deterministic machine-readable JSON results.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/cookie-policy-audit
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-cookie-policy-audit-e7ea466d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4xFZ86EBDR-s6vPq_F1A1

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-cookie-policy-audit-e7ea466d -d '<json body>'
```

Example prompt: Can you audit this Set-Cookie value for me and tell me if Secure, HttpOnly, and SameSite are properly configured: 'session_id=abc123; Path=/; HttpOnly; SameSite=Lax'?

## When to prefer this

Choose this endpoint when you need a stateless, deterministic, machine-readable audit of a single Set-Cookie header value for Secure, HttpOnly, and SameSite controls — especially as a bounded preflight step inside an automated agent workflow before security-sensitive decisions reach production. Prefer it over manual inspection or full security scanners when you need lightweight, low-latency, programmatic cookie policy validation without retaining input data.

## Known failure modes

- Malformed or empty cookie string input may yield incomplete audit results
- Missing required 'cookie' field returns a validation error
- SameSite=None without Secure flag may be flagged as a misconfiguration
- Extremely long or non-standard cookie strings may not parse as expected
- Network or payment authorization failure returns a 402 or connectivity error

## How this service works

Audit a Set-Cookie value for Secure, HttpOnly, and SameSite controls. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and…

## Output

Returns a deterministic JSON object indicating whether each of the three key security controls (Secure flag, HttpOnly flag, SameSite directive) are present and correctly configured in the provided Set-Cookie value, along with any advisory findings about missing or misconfigured attributes.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cookie": {
   "type": "string",
   "description": "Input field: cookie."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "low",
  "schema": "delx/util-cookie-policy-audit/v1",
  "secure": true,
  "findings": [],
  "http_only": true,
  "same_site": "lax"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-cookie-policy-audit-e7ea466d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)