Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
60
💰 Paid API

Http-Security-Headers-Grade

http-security-headers-grade.x402supply.com · http-security-headers-grade.x402supply.com

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-paste fix values, and cookie flag issues.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain http-security-headers-grade.x402supply.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Trust score
60/100
grade C · 3 of 9 criteria apply
Uptime
not graded
catalogue listing · no agent card to probe
Observed inflow · 30d
not yet measured
wallet declared · scan pending
Invocations · 7d
0
no calls observed
Listing drift · 7d
stable
1 snapshot tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

C
Conformance score: 60/100
Catalogue listing, not an A2A agent: a paid API listed by cdp_discovery. Scored on the 3 criteria that apply (24 of 40 points, scaled to 100); the A2A card criteria do not apply.
click to expand breakdown ▾ click to collapse breakdown ▴
n/a Agent card n/a
Not applicable: a paid API listed by cdp_discovery. The host serves no A2A agent card at /.well-known/agent-card.json, so the card criteria are not scored.
partial Live endpoint 15/25
Our probe received an HTTP 402 payment challenge from the host: live, but paid.
n/a Protocol version n/a
Not applicable: no A2A agent card served.
n/a JWS signature n/a
Not applicable: no A2A agent card served.
n/a Uptime track record n/a
Not applicable: our 1 probe in 30 days looked for an A2A agent card, which this host does not serve. That says nothing about the API's availability, so it is not graded.
n/a Skill declaration n/a
Not applicable: no A2A agent card served.
partial Verified Identity 5/10
Provider declared: http-security-headers-grade.x402supply.com (https://http-security-headers-grade.x402supply.com/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
n/a Security declaration n/a
Not applicable: no A2A agent card served.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Listing history

1 snapshot Every change to the catalogue entry
Captured Hash
2026-10-10 05:57:12 current 70821de5e4c8… view →
Uptime
not graded
catalogue listing · no agent card to probe
Response
—
last direct probe
Skills
0
declared
Streaming
—
SSE-capable

Endpoints

Pricing x402 on Base USDC Verified live · 402 challenge Dispute or improve this rating
From $0.0100 per call
Endpoint Price Currency
https://http-security-headers-grade.x402supply.com/mcp 0.01 USDC
https://http-security-headers-grade.x402supply.com/tools/grade_headers 0.01 USDC
Try it ↗ Opens the operator's playground / docs in a new tab.
Settlement wallet: 0x07ffb5044cf2cd4352be4655f578d0ba8cb754eb on Base · basescan ↗
Listed by facilitators Coinbase CDP · 1
Agent cardhttps://http-security-headers-grade.x402supply.com/.well-known/agent-card.json
Providerhttps://http-security-headers-grade.x402supply.com/
Docshttps://http-security-headers-grade.x402supply.com
Discovered via
agentic_market recrawl_warm cdp_discovery

Health · last 1 probes

When HTTP Live JSON-RPC Latency
2026-10-10 19:29:23 406 — —

Similar agents embedding-nearest

headers.use.x402atlas.com
One HEAD request against a URL, returning its parsed HTTP security headers as JSON: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Refe
headers.use.x402atlas.com · q 100%
http-header-checker.underscoredone.com
Sends a request to a web address you provide and reports back everything the server said in response: the status code, all the response head
http-header-checker.underscoredone.com · q 65%
SYNTHORA headers-audit
SYNTHORA headers-audit: HTTP security headers + TLS audit for any URL — missing headers, score 0-100, cookie flags. $0.005 USDC x402 Base.
SYNTHORA · q 0%
safefetch.schemasure.com
Fetch a public web page and return clean Markdown with stable citation anchors, a content hash, and a retrieval timestamp — plus evidence of
safefetch.schemasure.com · q 65%
schema.nsgoods.org
Signed extractability score (0-100) + breakdown + fixes for a URL. Free preview: GET /extractability/preview Blocked or bad input returns 40
schema.nsgoods.org · q 65%
http-status-checker.underscoredone.com
Give this API a list of up to 10 web addresses and it will visit each one to tell you whether it is working, broken, or redirecting visitors
http-status-checker.underscoredone.com · q 65%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets 
[![Agenstry grade](https://agenstry.com/badge/http-security-headers-grade.x402supply.com.svg)](https://agenstry.com/agents/http-security-headers-grade.x402supply.com)
[![Verified Business](https://agenstry.com/badge/http-security-headers-grade.x402supply.com/identity.svg)](https://agenstry.com/agents/http-security-headers-grade.x402supply.com)
[![Uptime](https://agenstry.com/badge/http-security-headers-grade.x402supply.com/uptime.svg)](https://agenstry.com/agents/http-security-headers-grade.x402supply.com)
[![A2A version](https://agenstry.com/badge/http-security-headers-grade.x402supply.com/protocol.svg)](https://agenstry.com/agents/http-security-headers-grade.x402supply.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON 
{
  "_source": "cdp_discovery",
  "resource_count": 1,
  "sample": "https://http-security-headers-grade.x402supply.com/tools/grade_headers"
}