{"slug":"2s-3132de30","name":"2s","summary":"Fetch a URL and grade its HTTP security headers. Pass url (scheme optional — defaults to https). Returns an overall letter grade + score, the list of present/missing headers, and a per-header analysis with the live value and specific issues for: Strict-Transport-Security (HSTS max-age/includeSubDomains), Content-Security-Policy (flags 'unsafe-inline'/'unsafe-eval'/missing default-src), X-Frame-Options or CSP frame-ancestors (clickjacking), X-Content-Type-Options (nosniff), Referrer-Policy, Permissions-Policy, and Cross-Origin-Opener/Resource-Policy. Also flags Server/X-Powered-By info disclosure. Analyzed from the target's LIVE response headers through an SSRF-guarded fetch (private/loopback targets refused) — an LLM cannot see a site's current headers. For web-app security review, vendor assessment, and CI gates.","status":"live","indexable":true,"listed_since":"2026-10-25T17:53:37.441135Z","sources":[{"source":"x402_bazaar","external_id":"https://2s.io/api/security/http-headers","owner_address":"0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5","seen_at":"2026-11-02T19:16:59.341372Z","removed_at":null}],"endpoints":[{"url":"https://2s.io/api/security/http-headers","host":"2s.io","protocol":"x402","state":"live","last_probe_at":"2026-11-03T00:29:32.462131Z","last_ok_at":"2026-11-03T00:29:32.462131Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"2s-io-49c1cd49","name":"2s.io"}],"payment_options":[{"endpoint_url":"https://2s.io/api/security/http-headers","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"4500","pay_to":"0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5","observed_at":"2026-11-03T00:29:32.462131Z"},{"endpoint_url":"https://2s.io/api/security/http-headers","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":"USDC","amount":"4500","pay_to":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","observed_at":"2026-11-03T00:29:32.462131Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":2,"last_paid_at":"2026-10-08T06:13:46.085Z","reported_at":"2026-11-02T19:16:59.341372Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check within the last hour."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 8 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-03T00:38:51.835838Z"},"identity":{"endpoint_domains":["2s.io"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}