# X402 Data API – HTTP Security Inspector

> X402 Data API – HTTP Security Inspector is a paid API for AI agents from api.x402dataapi.com, paid per call via x402, $1/call, status unknown (last checked 2026-09-14).

Analyzes a public URL for HTTP security posture and returns a score, HTTP status, and list of missing security headers or configurations

## Facts

- Endpoint: POST https://api.x402dataapi.com/v1/http-security
- Price: $1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-data-api-http-security-inspector-2115e70d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_f0ZyB-o1rOWrNJ_NFdl0d

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-data-api-http-security-inspector-2115e70d -d '<json body>'
```

Example prompt: Can you check the HTTP security posture of https://example.com and tell me its security score and what security headers or configurations it's missing?

## When to prefer this

Use this endpoint when you need a quick, paid-per-request HTTP security audit of a single public URL — especially useful for AI agents that need to programmatically assess web endpoint security posture, check for missing headers like HSTS or CSP, or validate security compliance before proceeding with further actions. Prefer this over manual header inspection tools when you need a structured score and diff of missing configurations.

## Known failure modes

- URL is not publicly reachable — endpoint may return an error or low score
- Malformed or non-HTTP/HTTPS URL input returns a validation error
- Target server is down or returns a non-2xx status, reflected in the status field
- Rate limiting or payment failure may block the request
- Private or internal IPs may be rejected for security reasons

## How this service works

Paid x402 API for AI agents that audits HTTP security headers, HSTS, Content-Security-Policy, X-Frame-Options, Referrer-Policy, Permissions-Policy and web security scan findings for a public URL.

## Output

Returns a JSON object containing the inspected URL, a numeric security score (0–100), the HTTP status code received, and an array of missing security headers or configurations. Example: {url: 'https://example.com', score: 80, status: 200, missing: []}.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "format": "uri",
   "description": "Public http or https URL to inspect"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "https://example.com",
  "score": 80,
  "status": 200,
  "missing": []
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-data-api-http-security-inspector-2115e70d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.x402dataapi.com](https://www.zero.xyz/host/api.x402dataapi.com/llms.txt)