# SiteSignal HTTP Cache CORS Cookie Policy Inspector

> SiteSignal HTTP Cache CORS Cookie Policy Inspector is a paid API for AI agents from supported-rely-thee-portion.trycloudflare.com, paid per call via x402, $0.02/call, status down (last checked 2026-09-15).

Inspects a public HTTP response for cache-control directives, CORS headers, and cookie security attributes by performing a bounded GET request to a given URL.

## Facts

- Endpoint: GET https://supported-rely-thee-portion.trycloudflare.com/x402/http-policy
- Price: $0.02/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitesignal-http-cache-cors-cookie-policy-inspector-bccfc84f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Z6jTtrVmoN8ldRJ5dBKGH

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitesignal-http-cache-cors-cookie-policy-inspector-bccfc84f
```

Example prompt: Can you check what cache-control headers, CORS policy, and cookie security attributes the URL https://api.example.com/data returns? Use an Origin of https://myapp.com so we can see if cross-origin requests are allowed.

## When to prefer this

Choose this endpoint when you need a quick, bounded snapshot of HTTP-level caching, CORS, and cookie security attributes for a single public URL without running a full site audit. It is ideal for debugging cross-origin issues, validating CDN cache behavior, or checking cookie security posture prior to integration. Prefer it over general HTTP snapshotters when the specific focus is cache directives, CORS policy, or cookie flags rather than content or redirect chains.

## Known failure modes

- Target URL is unreachable or returns a non-2xx status — partial or empty header data returned
- URL requires authentication — response may lack meaningful cache or cookie headers
- CORS headers absent — endpoint may not support cross-origin requests at all
- Invalid or malformed URL input — request rejected with validation error
- Rate limiting or firewall on target server — request may time out or be blocked

## How this service works

Inspect one bounded public HTTP response for cache directives, CORS headers, and redacted cookie security attributes.

## Output

Returns parsed details from the HTTP response including cache-control directives (e.g. max-age, no-store, public/private), CORS-related headers (Access-Control-Allow-Origin, Access-Control-Allow-Methods, etc.), and redacted cookie security attributes (Secure, HttpOnly, SameSite flags) observed in the bounded GET response.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "format": "uri"
      },
      "origin": {
       "type": "string",
       "format": "uri",
       "description": "Optional HTTP(S) Origin header to send during the bounded GET."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitesignal-http-cache-cors-cookie-policy-inspector-bccfc84f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from supported-rely-thee-portion.trycloudflare.com](https://www.zero.xyz/host/supported-rely-thee-portion.trycloudflare.com/llms.txt)