# Delx Security Headers Score

> Delx Security Headers Score is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Scores the presence of five high-value browser security headers in a given set of HTTP response headers, returning a deterministic machine-readable JSON result.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/security-headers-score
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-security-headers-score-8db94395
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nDfW38tR0qFZOm1LgKmRb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-security-headers-score-8db94395 -d '<json body>'
```

Example prompt: Can you score the browser security headers for my web app? Here are the response headers it returns: {'Content-Security-Policy': 'default-src self', 'X-Frame-Options': 'DENY', 'Strict-Transport-Security': 'max-age=31536000'}

## When to prefer this

Choose this endpoint when you need a fast, deterministic, stateless preflight or advisory check on HTTP response header security posture — especially within enterprise agent workflows before data, policy, or integration decisions. It is purpose-built for scoring exactly five high-value browser security headers and returns machine-readable JSON, making it ideal for automated pipelines. Prefer it over generic web crawlers or full vulnerability scanners when you already have the headers and just need a scored analysis.

## Known failure modes

- Missing or malformed 'headers' object in request body returns an error or empty score
- Passing non-HTTP-header key-value pairs may result in zero matches and a low score
- Unexpected header value formats may not be recognized as compliant
- Network or payment authorization failures may prevent the call from completing

## How this service works

Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and produc…

## Output

A deterministic JSON object indicating the presence and score of five high-value browser security headers, with per-header flags and an overall advisory score. Results are stateless and advisory — no data is retained.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "headers": {
   "type": "object",
   "description": "Input field: headers."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "score": 40,
  "schema": "delx/util-security-headers-score/v1",
  "missing": [
   "permissions-policy",
   "referrer-policy",
   "x-content-type-options"
  ],
  "present": [
   "content-security-policy",
   "strict-transport-security"
  ],
  "advisory": "Header presence does not prove policy correctness."
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-security-headers-score-8db94395/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)