# Security Headers Bulk Checker

> Security Headers Bulk Checker is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-14).

Checks HTTP security headers for up to 20 URLs in a single concurrent batch call, returning per-URL results in input order with error tracking.

## Facts

- Endpoint: GET https://intel.rallylive.ca/bulk/http-headers
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/security-headers-bulk-checker-75583ef5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1u64yxIgoCMBkCF3MLGhp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability security-headers-bulk-checker-75583ef5
```

Example prompt: Can you check the HTTP security headers for all these sites at once: example.com, myshop.io, blog.acme.org, api.startup.com, and portal.enterprise.net — and tell me which ones are missing important headers like HSTS or CSP?

## When to prefer this

Use this endpoint when you have a list of 2–20 URLs and need security header results for all of them efficiently in a single call. Prefer this over calling the single /http-headers endpoint repeatedly when you want concurrent processing, ordered results, and consolidated failure tracking. Best suited for bulk audits, portfolio checks, or enrichment pipelines where multiple domains need to be evaluated together.

## Known failure modes

- Exceeding 20 URL limit returns an error or only processes first 20
- Unreachable or invalid URLs return a per-item error rather than failing the whole batch
- Network timeouts on individual URLs populate the per-item error field
- Malformed URL inputs may cause per-item parsing errors
- Rate limiting or payment failures block the entire batch call

## How this service works

Bulk security headers check: up to 20 urls in one call, processed concurrently, results returned in input order with a per-item error field and a count of failures. Same answer per item as the single /http-headers endpoint (HTTP security headers check for a website). Batch enrichment for agents that hold a list. $0.01 per batch.

## Output

An array of per-URL results in the same order as the input, each matching the single /http-headers endpoint output (presence and values of HTTP security headers such as HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, etc.), plus a per-item error field indicating any failure for that URL and an overall count of failed items.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/security-headers-bulk-checker-75583ef5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)