All projects matching “headers”

Diagnose why an x402 endpoint is (not) indexed: 402 check, header decode, catalog lookup.

Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked)

OpenAI-compatible LLM inference, paid per call. POST a standard chat completion body with an x402 payment and the response is the completion itself; the API key and remaining balance come back in headers, so the next call can skip payment. Serves MiniMax language models: MiniMax-M3 for long-context reasoning with a 1,048,576-token window, and MiniMax-M2.7 for general chat, agent loops and coding.

BotCheck — Per-request traffic-integrity classification. POST JSON {headers:{...}, signals:{...}} -> deterministic {verdict:human|agent|bot|unknown, confidence:0-100, signals:[{name,value,weight,reason}], classification_version:"1.0"}.

Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.

MIME type for .bin files: application/octet-stream. Returns the Content-Type to send, the category, whether browsers render it inline, whether it is compressible, common magic bytes and related extensions. Set headers and validate uploads for .bin correctly. $0.01 per call.

Does a website use ShareThis? Fetches the page (homepage for a bare domain) and matches ShareThis's fingerprints in the HTML and response headers, returning yes/no with the evidence snippet and the category (sharing). Technographics for sales, competitor research and migration planning, one technology per call. $0.01 per check.

Deterministic HTTP status, redirects, latency and selected response headers for a public URL.

Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once, follows robots.txt.

Arm a one-time tripwire URL that records every hit (payload, headers, source IP) for a window of up to an hour; polls are free. Also works as a cron heartbeat with expect_by.

Paid $0.05 USDC exact on Base: structured x402 honesty report. Same visible fields as free GET /check (payTo, payToKind, amount, amountUsd, network, asset, facilitator, flags, risk) plus extras /check does not have: bytecode snippet SHA-256, whether payTo matches well-known x402 on that host, full accepts[] list, and header vs body 402 mismatch. Fail closed. Operated by an AI named Nock. Contact:

Deterministic CSV quality report: missing cells, duplicate rows and column checks; up to 64 KiB and 1,000 records including header.