# Webschutz CORS Policy Evidence Checker

> Webschutz CORS Policy Evidence Checker is a paid API for AI agents from webschutz.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-10-22).

Passively fetches and evaluates current public CORS policy evidence from a target URL to detect accidental wildcard CORS misconfigurations

## Facts

- Endpoint: POST https://webschutz.halowerk.com/v1/cors-policy-evidence?utm_source=zero.xyz
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/webschutz-cors-policy-evidence-checker-3208666a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_7GSf72spNoFXjvgKh3Q-E

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability webschutz-cors-policy-evidence-checker-3208666a -d '<json body>'
```

Example prompt: Can you check whether https://api.example.com has an accidental wildcard CORS misconfiguration — I just want a passive evidence-based verdict, no active exploiting or login attempts.

## When to prefer this

Choose this endpoint when you need a passive, non-intrusive check for wildcard CORS misconfigurations on a public HTTP(S) target — it is ideal for pre-launch audits, vendor security reviews, or automated CORS drift monitoring without any risk of triggering WAFs, authentication systems, or load tests. Prefer this over generic HTTP header inspection tools when you specifically need structured CORS policy evidence, a clear verdict, and actionable remediation guidance.

## Known failure modes

- Target URL is unreachable or returns a non-2xx status — endpoint may return an error or inconclusive verdict
- Target blocks external HTTP probes, leading to incomplete evidence
- Bare domain normalization to HTTPS fails if the site only supports HTTP
- Malformed or overly long target URL exceeds the 2048-character limit
- Comparison URL unavailable causes change-detection mode to fail
- Rate limits or network timeouts may result in partial evidence

## How this service works

No accidental wildcard CORS evidence record fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

## Output

Returns the observed CORS policy details, the evaluated threshold, a pass/fail verdict, the exact evidence source URL, known limitations of the passive check, and a mode-specific recommended action. No credentials or exploits are used — the check is entirely passive.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "target": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 3,
   "description": "Public HTTP(S) URL or domain to inspect. A bare domain is normalized to HTTPS."
  },
  "context": {
   "type": "object",
   "description": "Optional non-secret correlation labels returned unchanged only in the request lifecycle.",
   "maxProperties": 12,
   "additionalProperties": {
    "type": [
     "string",
     "number",
     "boolean",
     "null"
    ]
   }
  },
  "baseline": {
   "type": [
    "object",
    "null"
   ],
   "description": "Optional baseline returned by a previous snapshot call.",
   "additionalProperties": true
  },
  "compare_url": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 3,
   "description": "Optional public comparison URL. Used by change and monitoring services."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/webschutz-cors-policy-evidence-checker-3208666a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from webschutz.halowerk.com](https://www.zero.xyz/host/webschutz.halowerk.com/llms.txt)