x402 census · headers.use.x402atlas.com · 75579309c2be · JSON
GET /
live
Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.
Verdict: live. The unpaid GET reached a valid 402. The live amount equals the catalog price.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://headers.use.x402atlas.com/ |
| Method | GET |
| Price | $0.01 USDC = 10000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base); also accepts eip155:137, eip155:42161, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| payTo | 0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c |
| Seller | headers.use.x402atlas.com |
| Catalogs | cdp (row updated 2026-09-30), payai (row updated 2026-07-22) |
| Listed since (lower bound) | 2026-07-22 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-09-30 |
| CDP quality counters | 26 calls and 9 unique payers in 30 days, last call 2026-09-30 (catalog-reported, not verified on chain) |
| Category (keyword rule) | dev-tools/utilities |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | HTTP Security Headers Check · http, headers, security, hsts, csp |
Unpaid probe (census of 2026-09-30)
| Field | Value |
|---|---|
| Probed at | 2026-09-30T23:12:23.165Z |
| HEAD | 405 |
| GET | 402 |
| Verdict | live live: valid 402 to an unpaid GET |
| 402 carried in | header+body |
| x402Version in the 402 | 2 |
| accepts[0] | {"scheme":"exact","network":"eip155:8453","amount":"10000","payTo":"0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":300,"extra":{"name":"USD Coin","version":"2"}} |
| Live amount equals catalog price | yes |
| Live payTo equals catalog payTo | yes |
| extensions.bazaar in the 402 | yes |
| PAYMENT-REQUIRED header | yes |
| WWW-Authenticate offer | none |
| Content type / server / CORS | application/json / n/a / none |
| Latency | 6,288 ms |
| Error | payment_required |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Distinct payers | 7 |
| Payments | 9 |
| USDC volume | $0.09 |
| Median payment | $0.01 |
| First / last payment | 2026-07-22 / 2026-09-17 |
| Sampler-shaped share of payments | 100.0% |
| Payers that are not samplers | 0 |
| Source | forensics-2026-09-30 |
| Address | 0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c |
Declared input and output (extensions.bazaar)
{
"input": {
"method": "GET",
"queryParams": {
"url": "https://example.com/"
},
"type": "http"
},
"output": {
"type": "json",
"example_truncated": true,
"chars": 569
}
}
Try it (unpaid: shows the 402)
curl -si -X GET 'https://headers.use.x402atlas.com/' -H 'accept: application/json'
The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/75579309c2be/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"75579309c2be"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: PayAI listing status · agentic.market (CDP Bazaar front end) · this record as JSON · all resources on headers.use.x402atlas.com.