# NetIntel Tech Stack Fingerprinter

> NetIntel Tech Stack Fingerprinter is a paid API for AI agents from netintel-production-440c.up.railway.app, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-11).

Fetches a URL and detects its full technology stack from HTTP headers, HTML meta tags, cookies, and script patterns — returning CMS, framework, CDN, server, analytics, WAF, and security tool detections plus a security grade.

## Facts

- Endpoint: GET https://netintel-production-440c.up.railway.app/tech-fingerprint/analyze?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netintel-production-440c-up-railway-app-ad0c9d1b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_v9lm7v8z6qR1TdLtFCll1

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netintel-production-440c-up-railway-app-ad0c9d1b
```

Example prompt: Can you fingerprint https://shopify.com and tell me what CMS, CDN, WAF, and JavaScript frameworks it's running, plus give me its security header grade?

## When to prefer this

Choose this endpoint when you need to identify the technology stack of a public website without a browser, especially when you want both technology detections (CMS, CDN, WAF, frameworks) and a security posture grade in a single call. Prefer it over manual header inspection or browser-based tools when automating competitive research, security audits, or infrastructure profiling at scale.

## Known failure modes

- URL is unreachable or returns a non-200 status — partial or empty detections returned
- Invalid or malformed URL input — validation error response
- Target blocks automated requests or returns bot-detection page — inaccurate or empty detections
- Timeout on slow-responding target — response_time_ms may be high and detections incomplete
- Private/localhost URLs rejected for security reasons

## How this service works

Fetch a URL and detect the full technology stack from HTTP response headers, HTML meta tags, cookies, and script patterns — returns CMS, framework, CDN, server, analytics, and security tool detections so agents can profile any web target without a browser.

## Output

Returns a JSON object with the target URL, a letter security grade (A–F), a numeric score (0–100), a summary object containing detected CDN, CMS, WAF, server, analytics tools, and JavaScript frameworks, an array of security findings with rule names, details, and score deductions, an array of technology detections each with name/category/confidence, HTTP status code, response time in milliseconds, and lists of present and missing security headers.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "url": "https://www.wikipedia.org"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "URL to fingerprint (e.g. https://example.com); bare domains are accepted and get https:// prepended. Aliases also accepted: target, domain, host, site (query param or JSON body)."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "url": {
       "type": "string"
      },
      "grade": {
       "type": "string"
      },
      "score": {
       "type": "number"
      },
      "summary": {
       "type": "object"
      },
      "findings": {
       "type": "array"
      },
      "detections": {
       "type": "array"
      },
      "status_code": {
       "type": "number"
      },
      "response_time_ms": {
       "type": "number"
      },
      "security_headers_missing": {
       "type": "array"
      },
      "security_headers_present": {
       "type": "array"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "https://example.com",
  "grade": "C",
  "score": 68,
  "summary": {
   "cdn": "Cloudflare",
   "cms": "WordPress",
   "waf": "Cloudflare WAF",
   "server": "Nginx",
   "analytics": [
    "Google Analytics"
   ],
   "javascript_frameworks": [
    "jQuery"
   ]
  },
  "findings": [
   {
    "rule": "missing_csp",
    "detail": "Content-Security-Policy header missing",
    "deduction": -20
   }
  ],
  "detections": [
   {
    "name": "Cloudflare",
    "category": "cdn",
    "confidence": "high"
   },
   {
    "name": "WordPress",
    "category": "cms",
    "confidence": "high"
   }
  ],
  "status_code": 200,
  "response_time_ms": 342,
  "security_headers_missing": [
   "Content-Security-Policy",
   "X-Content-Type-Options",
   "Referrer-Policy"
  ],
  "security_headers_present": [
   "Strict-Transport-Security",
   "X-Frame-Options"
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netintel-production-440c-up-railway-app-ad0c9d1b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from netintel-production-440c.up.railway.app](https://www.zero.xyz/host/netintel-production-440c.up.railway.app/llms.txt)