{"slug":"http-security-headers-grader-d04fc445","name":"HTTP security headers grader","summary":"Pass ?url= and get a graded check of the final response's security headers: HSTS, Content-Security-Policy, X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and Set-Cookie flags (Secure, HttpOnly, SameSite; names only, never values). Each header gets present, value, verdict and points; the total is a score out of 100 with the scoring rule in the output. One GET at one moment. Public http(s) hosts on ports 80/443/8080.","status":"live","headings":[{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-11-06T20:27:04.589846Z","sources":[{"source":"x402_bazaar","external_id":"https://apexfaucet.xyz/api/x402/security-headers","owner_address":"0xd334ab5151c624cada654854e2879903dc4217ed","seen_at":"2026-11-11T10:20:43.970045Z","removed_at":null}],"endpoints":[{"url":"https://apexfaucet.xyz/api/x402/security-headers","host":"apexfaucet.xyz","protocol":"x402","state":"live","last_probe_at":"2026-11-11T23:51:26.361850Z","last_ok_at":"2026-11-11T23:51:26.361850Z","tools_count":null,"tools_changed_at":null,"uptime_24h":0.5,"uptime_30d":0.8571428571428571}],"also_listed_as":[{"slug":"apexfaucet-xyz-f3cfed4a","name":"apexfaucet.xyz"}],"payment_options":[{"endpoint_url":"https://apexfaucet.xyz/api/x402/security-headers","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"2000","pay_to":"0xd334ab5151c624cada654854e2879903dc4217ed","observed_at":"2026-11-11T23:51:26.361850Z"},{"endpoint_url":"https://apexfaucet.xyz/api/x402/security-headers","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":null,"amount":"2000","pay_to":"HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ","observed_at":"2026-11-11T23:51:26.361850Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":2,"last_paid_at":"2026-11-08T03:41:38.399Z","reported_at":"2026-11-11T10:20:43.970045Z"},"assessment":{"method":"2026.11.4","checks":[{"id":"answers","state":"pass","reason":"Answered a check within the last hour."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 5 days; 30 are needed."},{"id":"real_customers","state":"pass","reason":"11 independent wallets paid the wallet it asks to be paid at in 30 days, counted on-chain by addrbook."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":2,"applicable":4,"contradicted":false,"computed_at":"2026-11-12T00:21:41.914565Z"},"identity":{"endpoint_domains":["apexfaucet.xyz"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}