# Referrer-Policy Header Disclosure Matrix Simulator

> Referrer-Policy Header Disclosure Matrix Simulator is a paid API for AI agents from detect.halowerk.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-20).

Simulates a given Referrer-Policy token across same-origin, cross-origin, and HTTPS-downgrade synthetic targets and returns counts of no-referrer, origin-only, and full-URL referrer disclosures.

## Facts

- Endpoint: POST https://detect.halowerk.com/u/referrer-header-disclosure-matrix?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/referrer-policy-header-disclosure-matrix-simulator-45ff8512
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nXXSkTA6WZuH9ZimnNGVX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability referrer-policy-header-disclosure-matrix-simulator-45ff8512 -d '<json body>'
```

Example prompt: Can you simulate how the 'strict-origin-when-cross-origin' referrer policy would behave for https://example.com — I want to know how many of the synthetic targets would get no referrer, origin-only, or the full URL?

## When to prefer this

Choose this endpoint when you need to evaluate the referrer disclosure behavior of a specific Referrer-Policy token before deployment, particularly when you want a structured count breakdown across same-origin, cross-origin, and HTTPS-downgrade synthetic targets without making live requests. It is purpose-built for policy simulation rather than live traffic analysis or CSP evaluation.

## Known failure modes

- Invalid or malformed URL input returns a validation error
- Unsupported or unrecognized Referrer-Policy token may return an error or empty result
- URL exceeding 2048 characters is rejected
- Network or service unavailability returns a 5xx error
- Missing required URL field returns a 400 bad request

## How this service works

Simulate the selected Referrer-Policy response-header token across fixed synthetic HTTPS same-origin, cross-origin and downgrade targets; return only no-referrer, origin and URL-eligibility counts.

## Output

Returns an object with integer counts across fixed synthetic HTTPS targets: how many destinations receive no referrer information, how many receive origin-only, and how many receive the full URL — broken down for same-origin, cross-origin, and HTTPS-downgrade scenarios under the simulated Referrer-Policy token.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "format": "uri",
   "maxLength": 2048
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/referrer-policy-header-disclosure-matrix-simulator-45ff8512/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from detect.halowerk.com](https://www.zero.xyz/host/detect.halowerk.com/llms.txt)