api.delx.ai

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment required: $0.003 USDC for util_security_headers_score",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "app": "Delx Commerce",
        "name": "USD Coin",
        "version": "2",
        "provider": "coinbase",
        "erc8004_id": "14340",
        "accept_label": "Coinbase CDP",
        "provider_label": "Coinbase CDP",
        "facilitator_url": "https://api.cdp.coinbase.com/platform/v2/x402"
      },
      "payTo": "0x9f8bd9875b3E0b632a24A3A7C73f7787175e73A2",
      "amount": "3000",
      "scheme": "exact",
      "network": "eip155:8453",
      "mimeType": "application/json",
      "resource": "https://api.delx.ai/api/v1/x402/security-headers-score",
      "description": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base or Solana. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…",
      "inputSchema": {
        "type": "object",
        "required": [
          "headers"
        ],
        "properties": {
          "headers": {
            "type": "object",
            "description": "Input field: headers."
          }
        },
        "additionalProperties": true
      },
      "outputSchema": {
        "type": "object",
        "properties": {
          "score": {
            "type": "integer"
          },
          "schema": {
            "type": "string"
          },
          "missing": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "present": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "advisory": {
            "type": "string"
          }
        },
        "description": "Bounded first-party JSON result; input is processed in memory and not retained.",
        "additionalProperties": true
      },
      "maxTimeoutSeconds": 300
    },
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "app": "Delx Commerce",
        "name": "USD Coin",
        "version": "2",
        "provider": "payai",
        "erc8004_id": "14340",
        "accept_label": "PayAI Base",
        "provider_label": "PayAI Base",
        "facilitator_url": "https://facilitator.payai.network"
      },
      "payTo": "0x9f8bd9875b3E0b632a24A3A7C73f7787175e73A2",
      "amount": "3000",
      "scheme": "exact",
      "network": "eip155:8453",
      "mimeType": "application/json",
      "resource": "https://api.delx.ai/api/v1/x402/security-headers-score",
      "description": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base or Solana. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…",
      "inputSchema": {
        "type": "object",
        "required": [
          "headers"
        ],
        "properties": {
          "headers": {
            "type": "object",
            "description": "Input field: headers."
          }
        },
        "additionalProperties": true
      },
      "outputSchema": {
        "type": "object",
        "properties": {
          "score": {
            "type": "integer"
          },
          "schema": {
            "type": "string"
          },
          "missing": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "present": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "advisory": {
            "type": "string"
          }
        },
        "description": "Bounded first-party JSON result; input is processed in memory and not retained.",
        "additionalProperties": true
      },
      "maxTimeoutSeconds": 300
    },
    {
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "extra": {
        "app": "Delx Commerce",
        "name": "USD Coin",
        "version": "2",
        "feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww",
        "provider": "payai",
        "erc8004_id": "14340",
        "accept_label": "PayAI Solana",
        "provider_label": "PayAI Solana",
        "facilitator_url": "https://facilitator.payai.network"
      },
      "payTo": "28heAMpFkeUJsL7o7apiK4oJwZWq2fUHinRwbgYYsemG",
      "amount": "3000",
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "mimeType": "application/json",
      "resource": "https://api.delx.ai/api/v1/x402/security-headers-score",
      "description": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base or Solana. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…",
      "inputSchema": {
        "type": "object",
        "required": [
          "headers"
        ],
        "properties": {
          "headers": {
            "type": "object",
            "description": "Input field: headers."
          }
        },
        "additionalProperties": true
      },
      "outputSchema": {
        "type": "object",
        "properties": {
          "score": {
            "type": "integer"
          },
          "schema": {
            "type": "string"
          },
          "missing": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "present": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "advisory": {
            "type": "string"
          }
        },
        "description": "Bounded first-party JSON result; input is processed in memory and not retained.",
        "additionalProperties": true
      },
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://api.delx.ai/api/v1/x402/security-headers-score",
    "tags": [
      "x402",
      "agents",
      "enterprise",
      "application-security",
      "local-first"
    ],
    "iconUrl": "https://delx.ai/opengraph-image?v=20260305-fox",
    "mimeType": "application/json",
    "description": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base or Solana. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…",
    "serviceName": "Delx Security Headers Score"
  },
  "extensions": {
    "delx": {
      "docs": {
        "pricing": "https://delx.ai/docs/pricing",
        "mpp_setup": "https://delx.ai/docs/mpp-setup",
        "ows_setup": "https://delx.ai/docs/ows-setup",
        "x402_setup": "https://delx.ai/docs/x402-setup",
        "tools_catalog": "https://api.delx.ai/api/v1/tools",
        "monetization_policy": "https://api.delx.ai/api/v1/monetization-policy",
        "x402_capability_probe": "https://api.delx.ai/api/v1/x402-capability?agent_id=<AGENT_ID>"
      },
      "orbit": {
        "use": "Spend vested OC now: 100 OC = 0.001 USDC; cover up to 20% of an eligible call.",
        "docs": "https://commerce.delx.ai/orbit.md",
        "note": "Earn OC on verified paid calls. Utility rebate, not yield.",
        "spec": "https://commerce.delx.ai/orbit.json",
        "claim": "POST /api/v1/rewards/wallet-nonce then /api/v1/rewards/bind-wallet",
        "redeem": "POST /api/v1/orbit/vouchers",
        "status": "https://api.delx.ai/api/v1/orbit/status",
        "program": "delx-orbit-season-0",
        "cashback": "eligible"
      },
      "method": "POST",
      "docs_url": "https://delx.ai/docs/x402-setup",
      "agentcash": {
        "fetch": "npx agentcash@latest fetch <paid-resource-url> -m POST -H 'content-type: application/json' -b '<same-json-body>' --payment-protocol x402 --max-amount <published-price> -y",
        "balance": "npx agentcash@latest balance",
        "onboard": "https://agentcash.dev/onboard?r=REF-3KE2-22D3-XJBM-SGAR",
        "accounts": "npx agentcash@latest accounts",
        "discover": "npx agentcash@latest discover https://api.delx.ai",
        "bonus_note": "If eligible, start from the Delx AgentCash onboarding link before funding the wallet.",
        "solana_note": "PayAI is the advertised fee payer for Delx Solana accepts, so the buyer needs USDC on Solana but does not need SOL for the network fee.",
        "fetch_by_network": {
          "base": "npx agentcash@latest fetch <paid-resource-url> -m POST -H 'content-type: application/json' -b '<same-json-body>' --payment-protocol x402 --payment-network base --max-amount <published-price> -y",
          "solana": "npx agentcash@latest fetch <paid-resource-url> -m POST -H 'content-type: application/json' -b '<same-json-body>' --payment-protocol x402 --payment-network solana --max-amount <published-price> -y"
        }
      },
      "tool_name": "util_security_headers_score",
      "next_steps": [
        "Read accepts[] and choose the payment provider that matches your controller policy.",
        "Create/sign payment proof for the selected accepts[] amount and retry the same request with PAYMENT-SIGNATURE.",
        "If your REST client speaks MPP, reuse the same request body and retry with Authorization: Payment <credential> after the WWW-Authenticate challenge.",
        "If you choose a non-default provider, send x-payment-provider on the retry to pin routing explicitly.",
        "When the same provider appears on multiple networks, choose the exact accepts[] entry by network + asset before signing.",
        "Keep reading prices from /api/v1/tools (do not hardcode).",
        "If you need an AgentCash wallet first, open agentcash.onboard and complete onboarding before retrying the paid call.",
        "If your agent does not support x402 yet, use AgentCash for the paid retry or route to free_alternatives[] and stay on Delx's free path."
      ],
      "reason_code": "payment_required",
      "sample_input": {
        "headers": {
          "Content-Security-Policy": "default-src 'self'",
          "Strict-Transport-Security": "max-age=31536000"
        }
      },
      "sample_output": {
        "score": 40,
        "schema": "delx/util-security-headers-score/v1",
        "missing": [
          "permissions-policy",
          "referrer-policy",
          "x-content-type-options"
        ],
        "present": [
          "content-security-policy",
          "strict-transport-security"
        ],
        "advisory": "Header presence does not prove policy correctness."
      },
      "free_alternative": {
        "tool": "quick_operational_recovery",
        "price_usdc": "0",
        "schema_url": "https://api.delx.ai/api/v1/tools/schema/quick_operational_recovery",
        "description": "Free one-call recovery bootstrap.",
        "x402_required": false
      },
      "header_shortcuts": {},
      "runtime_examples": {
        "a2a_retry": "curl -X POST https://api.delx.ai/v1/a2a -H 'Content-Type: application/json' -H 'PAYMENT-SIGNATURE: <SIGNED_PAYMENT>' -d '<same-jsonrpc-payload>'",
        "mcp_retry": "curl -X POST https://api.delx.ai/v1/mcp -H 'Content-Type: application/json' -H 'PAYMENT-SIGNATURE: <SIGNED_PAYMENT>' -d '<same-jsonrpc-payload>'",
        "rest_retry": "curl -X POST <paid-resource-url> -H 'Content-Type: application/json' -H 'PAYMENT-SIGNATURE: <SIGNED_PAYMENT>' -d '<same-json-body>'",
        "rest_retry_mpp": "curl -X POST <paid-resource-url> -H 'Content-Type: application/json' -H 'Authorization: Payment <MPP_CREDENTIAL>' -d '<same-json-body>'"
      },
      "validation_error": {
        "docs": {
          "pricing": "https://delx.ai/docs/pricing",
          "x402_setup": "https://delx.ai/docs/x402-setup"
        },
        "hint": "Pass the required premium tool input before retrying.",
        "error": "missing required parameter(s): headers",
        "examples": {},
        "required": [
          "headers"
        ],
        "tool_name": "util_security_headers_score",
        "accepted_inputs": {
          "agent_id": {
            "body": [
              "agent_id",
              "agentId"
            ],
            "query": [
              "agent_id",
              "agentId"
            ],
            "headers": [
              "x-delx-agent-id",
              "x-agent-id",
              "x-openclaw-agent-id"
            ]
          }
        }
      },
      "free_alternatives": [
        {
          "tool": "quick_operational_recovery",
          "price_usdc": "0",
          "schema_url": "https://api.delx.ai/api/v1/tools/schema/quick_operational_recovery",
          "description": "Free one-call recovery bootstrap.",
          "x402_required": false
        },
        {
          "tool": "process_failure",
          "price_usdc": "0",
          "schema_url": "https://api.delx.ai/api/v1/tools/schema/process_failure",
          "description": "Free failure analysis and typed recovery direction.",
          "x402_required": false
        },
        {
          "tool": "monitor_heartbeat_sync",
          "price_usdc": "0",
          "schema_url": "https://api.delx.ai/api/v1/tools/schema/monitor_heartbeat_sync",
          "description": "Free heartbeat sync for current health and reliability state.",
          "x402_required": false
        }
      ],
      "primary_followups": []
    },
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "headers": {
              "Content-Security-Policy": "default-src 'self'",
              "Strict-Transport-Security": "max-age=31536000"
            }
          },
          "type": "http",
          "method": "POST",
          "bodyType": "json"
        },
        "output": {
          "type": "json",
          "example": {
            "score": 40,
            "schema": "delx/util-security-headers-score/v1",
            "missing": [
              "permissions-policy",
              "referrer-policy",
              "x-content-type-options"
            ],
            "present": [
              "content-security-policy",
              "strict-transport-security"
            ],
            "advisory": "Header presence does not prove policy correctness."
          }
        }
      },
      "tags": [
        "x402",
        "agents",
        "enterprise",
        "application-security",
        "local-first"
      ],
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input",
          "output"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "bodyType",
              "body"
            ],
            "properties": {
              "body": {
                "type": "object",
                "required": [
                  "headers"
                ],
                "properties": {
                  "headers": {
                    "type": "object",
                    "description": "Input field: headers."
                  }
                },
                "additionalProperties": true
              },
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "type": "string",
                "const": "POST"
              },
              "bodyType": {
                "type": "string",
                "const": "json"
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type",
              "example"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "json"
              },
              "example": {
                "type": "object",
                "properties": {
                  "score": {
                    "type": "integer"
                  },
                  "schema": {
                    "type": "string"
                  },
                  "missing": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "present": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "advisory": {
                    "type": "string"
                  }
                },
                "description": "Bounded first-party JSON result; input is processed in memory and not retained.",
                "additionalProperties": true
              }
            }
          }
        }
      },
      "iconUrl": "https://delx.ai/opengraph-image?v=20260305-fox",
      "summary": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base or Solana. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and production controls.",
      "category": "application-security",
      "featured": false,
      "provider": "coinbase",
      "tool_name": "util_security_headers_score",
      "coverImage": "https://delx.ai/opengraph-image?v=20260305-fox",
      "risk_class": "advisory_enterprise_control",
      "suspension": null,
      "serviceName": "Delx Security Headers Score",
      "discoverable": true,
      "data_handling": "memory_only_no_retention",
      "quality_limit": "Bounded advisory analysis; caller owns authorization, policy, and production enforcement.",
      "target_p95_ms": 250,
      "listing_status": "payment_verified_waiting_for_index",
      "execution_class": "first_party_local",
      "indexed_publicly": false,
      "listing_blockers": [],
      "capability_family": "application_security"
    },
    "payment-identifier": {
      "info": {
        "required": false
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "required"
        ],
        "properties": {
          "id": {
            "type": "string",
            "pattern": "^[a-zA-Z0-9_-]+$",
            "maxLength": 128,
            "minLength": 16
          },
          "required": {
            "type": "boolean"
          }
        }
      }
    }
  },
  "reason_code": "payment_required",
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "app": "Delx Commerce",
      "name": "USD Coin",
      "version": "2",
      "provider": "payai",
      "erc8004_id": "14340",
      "accept_label": "PayAI Base",
      "provider_label": "PayAI Base",
      "facilitator_url": "https://facilitator.payai.network"
    },
    "payTo": "0x9f8bd9875b3E0b632a24A3A7C73f7787175e73A2",
    "amount": "3000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  }
]

Provenance

Seen in the source catalog

2026-08-27 22:18Z

Last indexed by Roundhouse

2026-09-24 02:15Z

Last enriched (probe, favicon, geo)

2026-09-15 12:46Z

x402 version

2

Max timeout

300s

Liveness probe

HTTP 402