MEmercury-hq
cited-headers
security-headers
http-security
header-audit
hsts
csp
clickjacking
vendor-risk
attestation
provenance
verifiable-data-record
agent-native
keyless
data-feed

MERCURY Cited Security-Headers Audit

URL → a deterministic HTTP security-headers audit (HSTS, CSP, X-Frame, X-Content-Type, Referrer-Policy, Permissions-Policy + more) with a letter grade and concrete findings, wrapped in a signed, offline-verifiable provenance receipt. Keyless, no LLM, no signup.

get/buy/headers

Request

Query parameters

urlstring required

the page/endpoint to audit (http/https)

Response

Delivered after the x402 payment settles on Base mainnet.

okboolean required

true on success; false on an honest failure (never charged for a stub)

urlstring required

final URL after redirects

statusinteger

upstream HTTP status of the audited response

textstring

canonical sorted-key JSON of data — the exact string the receipt signs over

fetchedAtstring

ISO-8601 fetch time (provenance metadata)

errorstring

present only when ok:false

Changes

No recorded changes to this operation across all 1 revision of this API.