---
title: "FAPI Security Header & Compliance Validator"
method: POST
path: "/v1/tools/validate_fapi_security_headers"
tags: ["FAPI", "security", "headers", "PKCE", "DPoP", "PAR", "mTLS", "open banking", "OAuth2"]
---

# FAPI Security Header & Compliance Validator

`POST /v1/tools/validate_fapi_security_headers`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/validate_fapi_security_headers`
- Auth: none declared

Validates HTTP security headers against FAPI 1.0 Advanced and FAPI 2.0 Message Signing standards. Checks for PKCE, DPoP, PAR, mTLS, and required header values. Produces a security compliance report with gap remediation guidance.

**Tool URL:** https://ainumbers.co/tools/97-fapi-security-validator.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `headers` object, required
  - `standard` 'fapi1' | 'fapi2'

## Response `200`

Successful tool execution result

- object
  - `pass_count` number
  - `warn_count` number
  - `fail_count` number
  - `score` number
  - `fapi_ready` boolean

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)