HTTP Headers & Security Grade

Name: HTTP Headers & Security Grade
Price: 0.002 USDC
Availability: InStock

Fetch a URL's HTTP response headers with the full redirect chain, status, server, caching and a security grade (A-F) based on HSTS, CSP, X-Frame-Options and other headers, listing what is missing. Use for security reviews, redirect debugging or SEO checks.

MediaLiveeip155:8453Exactvia cdp

https://bess-x402.onrender.com/v1/web/headers

SecurityHttpHeadersRedirectsSeo

Calls · 30d

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far.

$1.55

Verified settled volume

419 settlements proven x402 by their on-chain EIP-3009 marker.

$0.0020

Listed price

As published in the catalog. Always read the live 402 before paying.

Calls · 30d

Upstream's own call count for this endpoint, not ours.

Unique payers · 30d

Last called 2026-10-23 13:36Z

—

Upstream on-chain volume

Reported by the source catalog.

Paid to

0x1129A6BB9C6165FF07fdC509c107B522CA0e1871

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.002USDC≈ $0.002 USD

on Base · exact scheme

Pay 0.002 USDC on Base to 0x1129…e1871. The signed payment is good for 5 minutes.

Paid to: 0x1129…e1871
USD Coin contract: 0x8335…02913
Payment window: 5 minutes
As published: 2000 smallest units

2000units

on Polygon · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0x1129…e1871
Token contract: 0x3c49…c3359
Payment window: 5 minutes

2000units

on Arbitrum · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0x1129…e1871
Token contract: 0xaf88…e5831
Payment window: 5 minutes

The catalog’s raw entry

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:137",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:42161",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "url": "https://stripe.com"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "url": "https://stripe.com",
          "https": true,
          "server": "nginx",
          "status": 200,
          "headers": {
            "date": "Thu, 22 Oct 2026 06:45:11 GMT",
            "x-wc": "3ff",
            "server": "nginx",
            "report-to": "{\"group\":\"coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report\"}],\"include_subdomains\":true}, {\"group\":\"wsp_coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\"}],\"include_subdomains\":true...",
            "connection": "keep-alive",
            "set-cookie": "cid=407dcab3-4cf7-3e75-862d-15bf5d72f327; Path=/; Domain=stripe.com; Max-Age=7776000; Secure; SameSite=Lax",
            "x-mkt-cache": "HIT",
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade",
            "x-frame-options": "SAMEORIGIN",
            "content-encoding": "gzip",
            "transfer-encoding": "chunked",
            "reporting-endpoints": "coop=\"https://q.stripe.com/coop-report\", wsp_coop=\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", wsp_coep=\"https://q.stripe.com/coep-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", csp=\"https://q.stripe.com/csp-repor...",
            "x-content-type-options": "nosniff",
            "content-security-policy": "base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...",
            "x-stripe-proxy-response": "upstream",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "cross-origin-opener-policy": "same-origin-allow-popups; report-to=\"wsp_coop\"",
            "x-stripe-server-rpc-duration-micros": "65156",
            "cross-origin-opener-policy-report-only": "same-origin-allow-popups; report-to=\"wsp_coop\""
          },
          "security": {
            "grade": "A",
            "score": 90,
            "missing": [
              "permissions-policy"
            ],
            "present": {
              "referrer-policy": "no-referrer-when-downgrade",
              "x-frame-options": "SAMEORIGIN",
              "x-content-type-options": "nosniff",
              "content-security-policy": "base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...",
              "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
              "cross-origin-opener-policy": "same-origin-allow-popups; report-to=\"wsp_coop\""
            },
            "insecure_cookies": 1
          },
          "final_url": "https://stripe.com",
          "redirects": [],
          "powered_by": null,
          "content_type": "text/html; charset=utf-8",
          "cache_control": null
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET",
                "HEAD",
                "DELETE"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "required": [
                "url"
              ],
              "properties": {
                "url": {
                  "type": "string",
                  "description": "URL or domain"
                }
              }
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog: 2026-10-23 13:36Z
Last indexed by Roundhouse: 2026-10-26 17:30Z
Last enriched (probe, favicon, geo): 2026-10-22 11:16Z
x402 version: 2
Max timeout: 300s
Liveness probe: HTTP 402

Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md

Show the prompt

Using Roundhouse, look up the x402 service HTTP Headers & Security Grade and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=HTTP%20Headers%20%26%20Security%20Grade'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://bess-x402.onrender.com/v1/web/headers, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.