All projects matching “headers”

Public domain DNS, mail configuration and HTTP security headers

Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked)

OpenAI-compatible LLM inference, paid per call. POST a standard chat completion body with an x402 payment and the response is the completion itself; the API key and remaining balance come back in headers, so the next call can skip payment. Serves MiniMax language models: MiniMax-M3 for long-context reasoning with a 1,048,576-token window, and MiniMax-M2.7 for general chat, agent loops and coding.

BotCheck — Per-request traffic-integrity classification. POST JSON {headers:{...}, signals:{...}} -> deterministic {verdict:human|agent|bot|unknown, confidence:0-100, signals:[{name,value,weight,reason}], classification_version:"1.0"}.

Arm a one-time tripwire URL that records every hit (payload, headers, source IP) for a window of up to an hour; polls are free. Also works as a cron heartbeat with expect_by.

Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.

One dated record row from the Receipts Index: what one AI engine answered for one check on one UTC date, as the businesses it named and the sources it showed. Returns the CSV header and one row; some fields are blank on some rows. Row ids are listed free at /v1/index and a free sample is at /v1/sample. A row id that does not exist returns 404 with no charge.

Verify a claimed USDC payment on Base: given a tx hash (or an x402 PAYMENT-RESPONSE header) and what you expect (payee, payer, amount, time window, confirmations), reads the chain and returns match / mismatch / not_settled / not_found with per-field checks, finality, the x402 EIP-3009 pattern, a self-payment flag and a second-RPC cross-check. Cannot show who owns an address or that a service was d

Inspect a public webpage for automation readiness, integration links, forms, robots policy, and security headers.

Detect the technologies a website runs — CMS, ecommerce platform, analytics, marketing/CRM, JS framework, hosting/CDN, chat and payments — straight from its public HTML and HTTP headers. No browser, no proxies, no login. Built for sales targeting and competitive research.

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.