# Delx SSRF URL Audit

> Delx SSRF URL Audit is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Screens a URL for SSRF risks including private/internal hosts, unsafe schemes, and embedded credentials, returning machine-readable JSON results.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/ssrf-url-audit
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-ssrf-url-audit-e54758c4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WTj_iS7lHXi6jK_5XTsuC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-ssrf-url-audit-e54758c4 -d '<json body>'
```

Example prompt: Before we fetch data from this user-supplied URL https://example.com/callback, can you run an SSRF audit on it to check for private hosts, unsafe schemes, or embedded credentials?

## When to prefer this

Use this endpoint when you need a fast, stateless, deterministic SSRF preflight check before making any server-side HTTP request based on user- or externally-supplied URLs. It is ideal for enterprise agent workflows where you need a bounded, local-only security gate with no data retention. Prefer it over general-purpose URL scanners when you specifically need SSRF-pattern detection (private hosts, unsafe schemes, embedded credentials) rather than malware or phishing classification.

## Known failure modes

- Malformed or non-parseable URL input returns a validation error
- Missing 'url' field in request body results in a 400-class error
- Ambiguous hostnames that resolve differently per environment may yield false negatives
- Edge-case IPv6 or encoded URLs may not be fully parsed in all variants
- Network-level issues contacting the API return transient errors

## How this service works

Screen a URL for private hosts, unsafe schemes, and embedded credentials. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…

## Output

A deterministic machine-readable JSON object indicating whether the URL is flagged for SSRF risks, including specific findings such as private/internal host detection, unsafe URL scheme (e.g. file://, gopher://), and embedded credentials in the URL string. Results are advisory and stateless.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "Input field: url."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "high",
  "schema": "delx/util-ssrf-url-audit/v1",
  "advisory": "Resolve DNS and re-check every redirect at execution time.",
  "findings": [
   "private_or_metadata_host"
  ],
  "hostname": "169.254.169.254"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-ssrf-url-audit-e54758c4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)