x402 census · api.orioncmd.com · 5f9116f5e0c1 · JSON

GET /v1/headers

live

OrionCMD Checks: HTTP security headers + redirect chain for a site. One HTTPS GET from Cloudflare's edge: redirect chain, final status, HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, a simple A-F grade and plain-English findings.

Verdict: live. The unpaid GET reached a valid 402. The live amount equals the catalog price.

Facts from the catalogs

Field Value

URL https://api.orioncmd.com/v1/headers

Method GET

Price $0.01 USDC = 10000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base)

payTo 0x2dAF658B01e257206375798a15832E9f547D65dD

Seller api.orioncmd.com

Catalogs cdp (row updated 2026-10-12), payai (row updated 2026-10-24)

Listed since (lower bound) 2026-10-12 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-10-24

CDP quality counters 2 calls and 2 unique payers in 30 days, last call 2026-10-12 (catalog-reported, not verified on chain)

Category (keyword rule) domains/dns

Templated path no

x402Version in catalog 2

Service name / tags OrionCMD Checks · ssl, tls, certificate, dns, domain

Unpaid probe (census of 2026-10-22)

Field Value

Probed at 2026-10-22T00:31:09.380Z

HEAD 400

GET 402

Verdict live live: valid 402 to an unpaid GET

402 carried in header

x402Version in the 402 2

accepts[0] {"scheme":"exact","network":"eip155:8453","amount":"10000","payTo":"0x2dAF658B01e257206375798a15832E9f547D65dD","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}

Live amount equals catalog price yes

Live payTo equals catalog payTo yes

extensions.bazaar in the 402 yes

PAYMENT-REQUIRED header yes

WWW-Authenticate offer none

Content type / server / CORS application/json / cloudflare / none

Latency 47 ms

Error Payment required

No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.

On-chain facts for the payTo (public address)

Field

Value

Settlement history

unresolved: payTo not seen in the payer forensics (180 wallets' outbound history) or the Blockscout sample

Declared input and output (extensions.bazaar)

{
 "input": {
  "method": "GET",
  "queryParams": {
   "domain": "example.com"
  },
  "type": "http"
 },
 "output": {
  "type": "json",
  "example": {
   "final_status": 200,
   "final_url": "https://example.com/",
   "findings": [
    "No Strict-Transport-Security header: browsers may still try plain HTTP first."
   ],
   "grade": "D",
   "headers": {
    "content-security-policy": null,
    "strict-transport-security": null
   },
   "host": "example.com"
  }
 }
}

Try it (unpaid: shows the 402)

curl -si -X GET 'https://api.orioncmd.com/v1/headers' -H 'accept: application/json'

The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/5f9116f5e0c1/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"5f9116f5e0c1"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: PayAI listing status · agentic.market (CDP Bazaar front end) · this record as JSON · all resources on api.orioncmd.com.