# Halowerk Schild – CSP Cookie Header Checker

> Halowerk Schild – CSP Cookie Header Checker is a paid API for AI agents from schild.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-10-19).

Checks the Content Security Policy (CSP) HTTP response header value on the cookie object of a target URL.

## Facts

- Endpoint: POST https://schild.halowerk.com/v1/pruef/schild/csp/cookie?utm_source=zero.xyz
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-schild-csp-cookie-header-checker-52c2e257
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_h48qFDlSpbCyg0SMI18yl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-schild-csp-cookie-header-checker-52c2e257 -d '<json body>'
```

Example prompt: Can you check whether https://example.com has a proper Content Security Policy header set on its cookies?

## When to prefer this

Use this endpoint when you specifically need to audit or validate the Content Security Policy (CSP) HTTP header as it applies to cookie objects on a public web URL. Prefer this over generic HTTP header checkers when you need a structured, machine-readable CSP cookie finding for security audits, compliance checks, or automated web security monitoring pipelines.

## Known failure modes

- Target URL is unreachable or returns a non-200 status — endpoint may return an error or empty finding
- URL is not publicly accessible (e.g. behind a firewall or auth wall) — cannot inspect headers
- Malformed URL input causes validation error
- CSS selector matches zero or multiple elements — first match used or error returned
- No CSP header present on the cookie object — finding reflects absence

## How this service works

Prüft am Objekt cookie den Befund Wert der CSP-Kopfzeile.

## Output

Returns the assessed finding of the Content Security Policy (CSP) header value as observed on the cookie object at the specified target URL, indicating whether a CSP is present, its value, and any compliance or security findings.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ziel": {
   "oneOf": [
    {
     "type": "string",
     "maxLength": 2048,
     "minLength": 1,
     "description": "Öffentliche HTTP(S)-Adresse; bei DNS-Befunden Domain oder öffentliche IP."
    },
    {
     "type": "object",
     "required": [
      "adresse"
     ],
     "properties": {
      "adresse": {
       "type": "string",
       "maxLength": 2048,
       "minLength": 1
      },
      "selektor": {
       "type": "string",
       "maxLength": 240,
       "minLength": 1,
       "description": "CSS-Selektor: genau ein Objekt, sonst erster Treffer des Objektfilters."
      },
      "vergleich": {
       "type": "string",
       "maxLength": 2048,
       "description": "Öffentliche Vergleichsadresse für Link-, Sitemap- oder Sprachbefunde."
      },
      "user_agent": {
       "type": "string",
       "pattern": "^[A-Za-z0-9_-]{1,80}$"
      },
      "dkim_selektor": {
       "type": "string",
       "pattern": "^[A-Za-z0-9_-]{1,63}$"
      }
     },
     "additionalProperties": false
    }
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-schild-csp-cookie-header-checker-52c2e257/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from schild.halowerk.com](https://www.zero.xyz/host/schild.halowerk.com/llms.txt)