# PennyRail Security Headers Checker

> PennyRail Security Headers Checker is a paid API for AI agents from pennyrail.vercel.app, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-14).

Fetches and analyzes HTTP security headers for a given web resource via a paid settlement endpoint

## Facts

- Endpoint: POST https://pennyrail.vercel.app/api/p/network/web.http-headers--security-headers
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/pennyrail-security-headers-checker-f69464ab
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jVLu4CAvvn5bWINADkuVa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability pennyrail-security-headers-checker-f69464ab -d '<json body>'
```

Example prompt: Can you check what HTTP security headers example.com is sending back — I want to know if they have things like CSP, HSTS, and X-Frame-Options set correctly?

## When to prefer this

Choose this endpoint when you need a quick, paid, machine-readable fetch of a web resource's HTTP security headers without running your own infrastructure. It is particularly useful in agent workflows that need to audit, compare, or validate security header configurations across multiple sites programmatically, and when a micro-payment model per call is acceptable.

## Known failure modes

- Target URL is unreachable or times out — returns an error or empty response
- Invalid or malformed URL input — may return a validation error
- Target server returns no security headers — response will reflect missing headers
- Payment settlement failure via x402 protocol — call is rejected before execution
- Rate limiting or upstream restrictions on the target domain

## How this service works

Machine-readable settlement service

## Output

Returns the HTTP response headers from the target web resource, with a focus on security-relevant headers such as Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy, enabling analysis of the site's security posture.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "additionalProperties": true
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/pennyrail-security-headers-checker-f69464ab/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from pennyrail.vercel.app](https://www.zero.xyz/host/pennyrail.vercel.app/llms.txt)