# ViewportWitness Security Gate by Apex Labs

> ViewportWitness Security Gate by Apex Labs is a paid API for AI agents from qa.honeygate.app, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-13).

Checks whether a public web URL passes a passive security gate before release, flagging potential issues without active exploitation

## Facts

- Endpoint: POST https://qa.honeygate.app/v1/security-gate?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/viewportwitness-security-gate-by-apex-labs-7ece4e9b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_OymAnX8Rd42UqvyrwBcPt

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability viewportwitness-security-gate-by-apex-labs-7ece4e9b -d '<json body>'
```

Example prompt: Before we push this release, can you run a passive security gate check on https://staging.myapp.com to make sure it passes before we go live?

## When to prefer this

Use this endpoint when you need a lightweight, passive security gate check on a public HTTPS URL before a web release, without triggering active exploitation or intrusive scanning. Prefer it over full penetration testing tools when the goal is a quick go/no-go release decision rather than deep vulnerability discovery.

## Known failure modes

- Invalid or non-public URL returns validation error
- Non-HTTPS URLs may be rejected
- Unreachable or offline URLs result in a connection error
- Rate limiting or payment failure returns 402 or 429
- Internal scan error if the target returns unexpected responses

## How this service works

Passive public web release security gate

## Output

A pass or fail security gate result for the given public HTTPS URL, indicating whether the page clears passive security checks prior to release, along with any relevant security findings or flags detected during the assessment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "format": "uri",
   "example": "https://example.com",
   "description": "Public HTTPS URL to check"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/viewportwitness-security-gate-by-apex-labs-7ece4e9b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from qa.honeygate.app](https://www.zero.xyz/host/qa.honeygate.app/llms.txt)