# VerifyLite Website Safety Check

> VerifyLite Website Safety Check is a paid API for AI agents from verifylite.hydratinghealingtouch.workers.dev, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-20).

Performs a passive security audit of a live website, checking TLS configuration, HTTPS redirects, security headers, mixed content, insecure forms, and domain age.

## Facts

- Endpoint: POST https://verifylite.hydratinghealingtouch.workers.dev/safe?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/verifylite-website-safety-check-84715c87
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Rxivq2RCogDdnGviEUo3z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability verifylite-website-safety-check-84715c87 -d '<json body>'
```

Example prompt: Can you run a safety check on https://example.com — I want to know if it has proper HTTPS, valid TLS, good security headers, and no mixed content or insecure forms?

## When to prefer this

Choose this endpoint when you need a quick, passive security posture snapshot of a live website without performing any active penetration or intrusive scanning. Ideal for vetting user-submitted URLs, pre-publishing link checks, or lightweight trust scoring before integrating a third-party site.

## Known failure modes

- Non-absolute or malformed URL returns a validation error
- Site is unreachable or times out — returns a connectivity failure
- HTTP-only URL with no TLS may result in partial results or explicit failure for TLS fields
- Very new or unresolvable domains may return unknown domain age

## How this service works

Website safety check for one URL. Passively fetches the site and returns a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags: TLS validity, HTTP-to-HTTPS redirect, redirect chain and offsite redirects, security headers, mixed content, insecure forms, and domain age from the official registry. Useful before visiting, linking to, buying from, or submitting data to an unfamiliar site. Not charged if the host cannot be checked.

## Output

Returns a structured report covering TLS validity, whether HTTP redirects to HTTPS, presence and correctness of security headers (e.g. HSTS, CSP, X-Frame-Options), detection of mixed content, presence of insecure (HTTP) forms, and the age of the domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "Absolute HTTP or HTTPS URL of the site to check."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/verifylite-website-safety-check-84715c87/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from verifylite.hydratinghealingtouch.workers.dev](https://www.zero.xyz/host/verifylite.hydratinghealingtouch.workers.dev/llms.txt)
