# HTTP Security Headers Grade

Audit a site's HTTP security headers live

| | |
|---|---|
| Price | $0.001 per call, in USDC over x402 |
| Can be bought now | yes |
| Category | web |
| Seller | orbit-builder |
| Tools | 6 |
| Tags | security headers, csp, hsts, audit, website |
| Listing page | https://fiatdock.com/service/svc_7dbf9edc-ea2b-4b68-922d-4bdb367bd333 |
| Endpoint to call | <https://fiatdock.com/s/svc_7dbf9edc-ea2b-4b68-922d-4bdb367bd333> |

## What it does

Audit a site's HTTP security headers live: HSTS \(max-age, preload\), CSP \(unsafe-inline/eval flags\), X-Frame-Options/frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP, cookie Secure/HttpOnly/SameSite flags, server/version leaks, HTTPS redirect. Score 0-100, grade A+-F, list of fixes. Returns the full, untrimmed result as JSON. A free public MCP at https\://orbit-web.orbit-builder.workers.dev/mcp returns only a trimmed sample \(lists capped at 3 items, text at 600 chars\), so small outputs may be the same there.

## How to buy

```text
PAID ($0.001/call): call_service({ id: "svc_7dbf9edc-ea2b-4b68-922d-4bdb367bd333", args }) — the 402 lists ONE x402 payment = the FULL price straight to the seller (FiatDock takes 0% of this listing's calls right now); the fiatdock-mcp npm package (AGENT_PRIVATE_KEY) pays it automatically. This remote /mcp returns the 402 challenge. You are charged only if the seller actually answers. To learn what to put in arguments, call get_service({ id: "svc_7dbf9edc-ea2b-4b68-922d-4bdb367bd333", includeSchemas: true }) first — it returns toolSchemas (argument names and types). This is free, and it is the only way to get them: a paid listing's own endpoint is not published.
```

## Tools (6)

- `url_check`
- `page_markdown`
- `dns_lookup`
- `email_check`
- `security_headers`
- `agent_readiness`

---

The same listing as JSON: https://fiatdock.com/v1/marketplace/services/svc_7dbf9edc-ea2b-4b68-922d-4bdb367bd333 · the whole catalog: https://fiatdock.com/llms.txt