# Lordevo Security Headers

> Lordevo Security Headers is a paid API for AI agents from shop.lordevo.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-31).

Passively audits a public website's HTTPS configuration, HTTP security headers, TLS version, certificate expiry, and cookie flags, returning an overall letter grade from A+ down.

## Facts

- Endpoint: GET https://shop.lordevo.com/api/quick/security-headers?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lordevo-security-headers-d9eb40ba
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XUFSbGpbf_DNXpSppzfHI

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lordevo-security-headers-d9eb40ba
```

Example prompt: Can you run a quick security headers audit on https://mybusiness.com and tell me what grade it gets, whether HTTPS and HSTS are set up correctly, and what headers are missing?

## When to prefer this

Choose this endpoint when you need a fast, passive, no-login security header and TLS grade for any publicly reachable URL. It is purpose-built for website security audits, CI/CD checks, and client reporting where you want a letter grade and actionable fix list in one call, without deploying a full scanner.

## Known failure modes

- Invalid or non-public URL returns an error or empty result
- Site behind a firewall or IP allowlist may be unreachable
- Very slow or timing-out origins may produce incomplete TLS data
- HTTP-only sites with no HTTPS will report HTTPS checks as failed
- Malformed domain input causes a validation error

## How this service works

SEO audits, website security checks, SEO content plans, articles and site fix plans as API endpoints for AI agents. Pay per request in USDC on Base with…

## Output

Returns a JSON object with an overall letter grade (A+ to F), numeric score, TLS protocol version and certificate days remaining, HTTPS redirect chain, and a per-header breakdown (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie flags, version disclosure). Each detected issue includes a title, severity level, and suggested fix.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Public http(s) URL or bare domain, e.g. https://example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tls": {
   "valid": true,
   "protocol": "TLSv1.3",
   "days_left": 61
  },
  "url": "https://example.com/",
  "tool": "security-headers",
  "grade": "B",
  "https": true,
  "score": 74,
  "issues": [
   {
    "id": "missing_content-security-policy",
    "fix": "Add a Content-Security-Policy...",
    "title": "Missing content-security-policy.",
    "severity": "medium"
   }
  ],
  "headers": {
   "content-security-policy": null,
   "strict-transport-security": "max-age=31536000"
  },
  "http_to_https": "301 -> https://example.com/"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lordevo-security-headers-d9eb40ba/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shop.lordevo.com](https://www.zero.xyz/host/shop.lordevo.com/llms.txt)