# SYNTHORA Headers Audit

> SYNTHORA Headers Audit is a paid API for AI agents from headers-audit.hergertsynthora.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-30).

Audits HTTP security headers and TLS configuration for any URL, returning a 0-100 security score, missing headers, and cookie flag analysis.

## Facts

- Endpoint: POST https://headers-audit.hergertsynthora.com/service?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-headers-audit-aa346c0a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_aA79bJDHRMimtLqeMXuwm

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-headers-audit-aa346c0a -d '<json body>'
```

Example prompt: Can you run a full HTTP security headers and TLS audit on https://mycompany.com and tell me the security score, what headers are missing, and any cookie flag issues?

## When to prefer this

Choose this endpoint when you need a quick, scored HTTP security header and TLS audit for any public URL without setting up your own tooling. It is ideal for developers doing pre-launch checks, security teams auditing third-party sites, or compliance workflows that need a standardized 0-100 score and a list of missing headers and cookie flags. Prefer this over manual curl-based checks or heavyweight scanners when you need a fast, structured JSON result with a receipt for audit trails.

## Known failure modes

- Invalid or unreachable URL returns error with no result
- Non-HTTPS URLs may produce partial TLS results
- Rate limiting or payment failure returns 402 or error response
- Timeout if the target server is slow to respond
- Malformed URL input causes validation error

## How this service works

SYNTHORA headers-audit: HTTP security headers + TLS audit for any URL — missing headers, score 0-100, cookie flags. $0.005 USDC x402 Base.

## Output

Returns a JSON object with an 'ok' boolean, a security score from 0 to 100, details on missing or misconfigured HTTP security headers (e.g. CSP, HSTS, X-Frame-Options), TLS audit results, cookie security flag analysis, and a signed receipt with an ed25519 algorithm field.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "input": {
   "type": "string",
   "description": "SYNTHORA headers-audit: HTTP security headers + TLS audit for any URL — missing headers, score 0-100, cookie flags. $0.005 USDC x402 Base."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "headers_audit",
  "result": {},
  "receipt": {
   "alg": "ed25519"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-headers-audit-aa346c0a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from headers-audit.hergertsynthora.com](https://www.zero.xyz/host/headers-audit.hergertsynthora.com/llms.txt)