Security Headers

Grade the security response headers of a URL.

$0.0030 per call POST /v1/tools/security-headers

Call it

The first response is 402 with the exact price and every rail you can pay with. Pay, repeat the request with the proof, and you get the result.

curl -X POST https://api.glianalabs.com/v1/tools/security-headers \
  -H 'content-type: application/json' \
  -d '{"url":"https://ai.glianalabs.com"}'

When to use it

Use when an agent vets a site before trusting it, or checks its own deployment. Inputs: url (required). Fetches once and scores content-security-policy, strict-transport-security, x-content-type-options, x-frame-options, referrer-policy and permissions-policy. Returns score 0-100, a grade A-F, present[] with the live values, and missing[] with what each absent header would have bought. Plain http loses points because HSTS cannot help there. Grades one URL: headers can differ per route, and a good grade says these defences are on, not that the application is sound.

What it costs

$0.0030 per successful call — flat, with no plan, minimum or monthly fee. A call that fails validation is refused before it runs, so it is never charged.

Not sure this is the right endpoint? GET /v1/consult?intent=… is free and answers that.

Often used with this

Osint Brief

$0.0120

Profile a contact or an organisation from open sources, in one call, and say why it looks the way it does.

Domain Lookup

$0.0020

Who registered a domain, how old it is, and where its DNS points, in one call.

Contract Scan

$0.0040

See what a deployed contract can do to its users, read from bytecode.

All tools →