---
title: "Header Security Check (x402)"
method: GET
path: "/x402/v2/header-security-check"
tags: ["x402"]
---

# Header Security Check (x402)

`GET /x402/v2/header-security-check`

## Request

- Base URL: `https://api.strale.io`
- URL: `https://api.strale.io/x402/v2/header-security-check`
- Auth: none required

Check HTTP response headers for security best practices: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns grade A-F.

## Query parameters

- `url` string, required

## Response `200`

Success

- object
  - `grade` string
  - `score` integer
  - `missing` unknown[]
    - unknown
  - `present` unknown[]
    - unknown

## Other responses

- `402`: Payment required (x402 — pay with USDC on Base)

---

[API](https://skmtc.dev/strale/apis/strale-api-2.md) · [All operations](https://skmtc.dev/strale/apis/strale-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/strale/apis/strale-api-2/revisions/a5293878cfc6?raw)