# GeekVault HTTP Headers Audit

> GeekVault HTTP Headers Audit is a paid API for AI agents from api.geekvault.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-29).

Audits a URL's HTTP response headers, returning which security and best-practice headers are present (with values) and which are missing.

## Facts

- Endpoint: GET https://api.geekvault.dev/net-tools/v1/headers-audit?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/geekvault-http-headers-audit-501e1ce0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_B3jtz4uJfUY6GUZbrKihQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability geekvault-http-headers-audit-501e1ce0
```

Example prompt: Can you audit the HTTP security headers on https://example.com and tell me which important headers are present and which ones are missing?

## When to prefer this

Choose this endpoint when you need a quick, programmatic audit of HTTP security headers for any public URL without setting up your own HTTP client and header-checking logic. Ideal for CI/CD checks, agent-driven security reviews, or one-off inspections where no API key or subscription is needed — just pay $0.002 USDC per call via x402.

## Known failure modes

- Invalid or unreachable URL returns an error response
- URL that returns non-HTTP response may fail to parse headers
- Redirects may cause audit to reflect final destination headers rather than original URL
- Payment failure (insufficient USDC balance) results in 402 response before the request is processed

## How this service works

Network, docs, image, web, and dev utility tools paid per call via x402. No signup, no API keys, no subscriptions — just USDC on Base.

## Output

Returns a JSON object with two fields: 'present' (an object mapping each detected HTTP header name to its value) and 'missing' (an array of expected security/best-practice header names that were absent from the response).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url"
 ],
 "properties": {
  "url": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "present",
  "missing"
 ],
 "properties": {
  "missing": {
   "type": "array",
   "items": {
    "type": "string"
   }
  },
  "present": {
   "type": "object",
   "propertyNames": {
    "type": "string"
   },
   "additionalProperties": {
    "type": "string"
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/geekvault-http-headers-audit-501e1ce0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.geekvault.dev](https://www.zero.xyz/host/api.geekvault.dev/llms.txt)