# Website Security & SEO Site Audit API

> Website Security & SEO Site Audit API is a paid API for AI agents from x402-url-evidence.vercel.app, paid per call via x402, $0.04/call, status unknown (last checked 2026-09-14).

Performs a deterministic security and quality audit of a public website URL, returning a scored report with categorized findings and actionable recommendations.

## Facts

- Endpoint: POST https://x402-url-evidence.vercel.app/api/site-audit
- Price: $0.04/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/website-security-seo-site-audit-api-d051dbd1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_s44J8EQztagHjEdKU-xiu

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability website-security-seo-site-audit-api-d051dbd1 -d '<json body>'
```

Example prompt: Can you run a full security and quality audit on https://mycompany.com and tell me what the score is, whether there are any high-priority issues, and what security policies like CSP might be missing?

## When to prefer this

Choose this endpoint when you need a deterministic, reproducible security and quality score for a public website — especially useful when you need consistent scoring across multiple runs or sites for comparison. Prefer this over general-purpose web scrapers when the goal is security posture assessment, missing header detection, or CSP validation rather than content extraction. Best for lightweight per-URL audits at low cost ($0.04/call) where you don't need a full crawl of an entire domain.

## Known failure modes

- Non-public or credential-protected URLs will fail or return incomplete results
- URLs behind bot-detection or rate limiting may not be fully auditable
- Malformed or non-HTTP(S) URLs will be rejected by schema validation
- Low dataCoveragePercent indicates the audit could not complete all steps
- Payment failure (insufficient USDC balance) will block the request via x402 protocol

## How this service works

Paid deterministic utility APIs settled in native USDC on Base.

## Output

Returns a JSON object with a numeric score (0-100), a rating label (e.g. 'good'), a summary of findings broken down by priority (low/medium/high), the final resolved URL after redirects, a list of specific findings each with a code, title, and priority level, and a dataCoveragePercent indicating how completely the audit could run.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Credential-free public HTTP(S) website URL"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "score": 78,
  "rating": "good",
  "summary": {
   "low": 3,
   "high": 0,
   "medium": 2,
   "stepsAttempted": 5,
   "stepsSucceeded": 5
  },
  "finalUrl": "https://example.com/",
  "findings": [
   {
    "code": "csp_missing",
    "title": "A Content Security Policy is not observed",
    "priority": "medium"
   }
  ],
  "dataCoveragePercent": 100
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/website-security-seo-site-audit-api-d051dbd1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-url-evidence.vercel.app](https://www.zero.xyz/host/x402-url-evidence.vercel.app/llms.txt)