# GlianaAI Security Headers Checker

> GlianaAI Security Headers Checker is a paid API for AI agents from api.glianalabs.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-18).

Fetches and analyzes HTTP security headers for a given web resource via GlianaAI's pay-per-call tool endpoint

## Facts

- Endpoint: GET https://api.glianalabs.com/x402/tools/security-headers?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-18
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/glianaai-security-headers-checker-e652a394
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_EMwHCNdzYOF9TIXk7jUVz

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability glianaai-security-headers-checker-e652a394
```

Example prompt: Can you check the HTTP security headers returned by example.com and tell me if any important ones like HSTS, CSP, or X-Frame-Options are missing?

## When to prefer this

Choose this endpoint when you need a quick, pay-per-call check of HTTP security headers without setting up your own infrastructure or signing up for a scanning service. Ideal for one-off audits, agent workflows that periodically verify header compliance, or when you want to pay in crypto (USDC) on chains like Base or Solana with no subscription.

## Known failure modes

- Target URL unreachable — network timeout or DNS failure
- Invalid or missing required input fields return validation error
- Payment failure in USDC results in 402 response with no data
- Target server returns no security-relevant headers — empty result set
- Rate limiting or blocked requests from the target server

## How this service works

One endpoint for 90+ generative AI models, live market data, SEC filings and identity APIs — image, video, music, speech, LLM chat, crypto and FX rates, DEX liquidity, gas, US company fundamentals and insider trades, document OCR and face matching. Pay per request in USDC on Tempo, Base, Solana, Algorand or BNB Chain with no signup, or top up a prepaid balance in rupiah.

## Output

Returns a JSON object identifying the tool invoked ('tools/security-headers') along with the HTTP security headers retrieved from the target resource, including presence or absence of headers such as Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "properties": {}
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tool": "tools/security-headers"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/glianaai-security-headers-checker-e652a394/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.glianalabs.com](https://www.zero.xyz/host/api.glianalabs.com/llms.txt)