# SiteSignal HTTP Cache CORS Cookie Policy Inspector

> SiteSignal HTTP Cache CORS Cookie Policy Inspector is a paid API for AI agents from phases-prot-shine-royal.trycloudflare.com, paid per call via x402, $0.02/call, status down (last checked 2026-09-15).

Inspects a public HTTP response for cache-control directives, CORS headers, and redacted cookie security attributes via a bounded GET request.

## Facts

- Endpoint: GET https://phases-prot-shine-royal.trycloudflare.com/x402/http-policy
- Price: $0.02/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitesignal-http-cache-cors-cookie-policy-inspector-b7314fe7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_KXH796zvPbKlR_S8nI5Un

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitesignal-http-cache-cors-cookie-policy-inspector-b7314fe7
```

Example prompt: Can you check the cache-control headers, CORS policy, and cookie security attributes for https://api.example.com/data — and test what CORS headers come back when the request origin is https://myapp.com?

## When to prefer this

Choose this endpoint when you need a lightweight, single-request snapshot of a public URL's HTTP cache policy, CORS configuration, or cookie security posture — especially useful for pre-integration audits, security checks, or debugging caching issues without writing custom HTTP tooling. Prefer it over general HTTP inspection tools when you specifically need structured output covering cache, CORS, and cookie attributes together.

## Known failure modes

- Non-public or authenticated URLs will fail to return useful data
- URLs requiring POST or non-GET methods are not supported
- Responses that redirect more than expected may not resolve correctly
- Endpoints that block automated user agents may return empty or error responses
- Invalid or malformed URL input results in a validation error

## How this service works

Inspect one bounded public HTTP response for cache directives, CORS headers, and redacted cookie security attributes.

## Output

Returns structured details about the HTTP response including cache-control directives (e.g. max-age, no-cache, no-store), CORS response headers (e.g. Access-Control-Allow-Origin, Access-Control-Allow-Methods), and redacted cookie security attributes (e.g. HttpOnly, Secure, SameSite flags) from a single bounded public GET request.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "format": "uri"
      },
      "origin": {
       "type": "string",
       "format": "uri",
       "description": "Optional HTTP(S) Origin header to send during the bounded GET."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitesignal-http-cache-cors-cookie-policy-inspector-b7314fe7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from phases-prot-shine-royal.trycloudflare.com](https://www.zero.xyz/host/phases-prot-shine-royal.trycloudflare.com/llms.txt)