risk data for machine payments
Endpoint
headers.use.x402atlas.com/
Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.
Score
The score is built from observations we collect ourselves: how the endpoint responds, what the envelope contains, how stable the price and the recipient are, who pays and how often. It is deterministic — the same input always produces the same result.
We do not publish the exact methodology yet. If you own this endpoint, write to us and we will show you, item by item, what drags the score down.
Recent probes
| When | Code | Latency | Scheme and network | Recipient | Price | Findings |
|---|---|---|---|---|---|---|
| 5h ago | 402 | 429 ms | exact eip155:8453 |
0x7f80…7b9c | 0.010000 | clean |
| 4d ago | 402 | 395 ms | exact eip155:8453 |
0x7f80…7b9c | 0.010000 | clean |
| 4d ago | 402 | 670 ms | exact eip155:8453 |
0x7f80…7b9c | 0.010000 | clean |
Reference
| URL | https://headers.use.x402atlas.com/ |
| Sources | bazaar |
| Recipient per catalogue | 0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c |
| Price per catalogue | 0.010000 |
| Machine access | /v1/endpoint · /full · badge |
Is this your endpoint?
The score is built only from public observations. If something we recorded is wrong — say our prober hit you during maintenance — write to us. We will recheck and publish your reply next to the score.
We do not delete accurate observations. The prober makes at most one request per second per host and only asks for the payment challenge — it never pays and never takes content.