x402 census · api.zfinia.com · c14bff82c0fa · JSON

POST /x402/v1/security-header-diff

live

Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport-Security max-age, dropped includeSubDomains, a newly permitted unsafe-inline or unsafe-eval, and a Content-Security-Policy that moved from enforcing to report-only so it no longer blocks anything. Ob…

Verdict: live. The unpaid GET reached a valid 402. The live amount equals the catalog price.

Facts from the catalogs

Field Value

URL https://api.zfinia.com/x402/v1/security-header-diff

Method POST

Price $0.11 USDC = 110000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base)

payTo 0x25e8245f07d5e4873987293dad666afbe56a9608

Seller api.zfinia.com

Catalogs cdp (row updated 2026-10-04)

Listed since (lower bound) 2026-10-04 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-10-04

CDP quality counters 1 calls and 1 unique payers in 30 days, last call 2026-10-04 (catalog-reported, not verified on chain)

Category (keyword rule) research/reports

Templated path no

x402Version in catalog 2

Service name / tags Security Header Diff · http headers, release gate, regression detection, web platform, developer tooling

Unpaid probe (census of 2026-10-22)

Field Value

Probed at 2026-10-22T00:28:04.922Z

HEAD 402

GET 402

Verdict live live: valid 402 to an unpaid GET

402 carried in header+body

x402Version in the 402 2

accepts[0] {"scheme":"exact","network":"eip155:8453","amount":"110000","payTo":"0x25e8245f07d5e4873987293dad666afbe56a9608","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":60,"extra":{"name":"USD Coin","version":"2"}}

Live amount equals catalog price yes

Live payTo equals catalog payTo yes

extensions.bazaar in the 402 yes

PAYMENT-REQUIRED header yes

WWW-Authenticate offer none

Content type / server / CORS application/json / Vercel / none

Latency 499 ms

Error Payment required

No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.

On-chain facts for the payTo (public address)

Field Value

Distinct payers 4

Payments 5

USDC volume $0.03

Median payment $0.01

First / last payment 2026-08-30 / 2026-09-30

Sampler-shaped share of payments 100.0%

Payers that are not samplers 0

Source forensics-2026-09-30

Address 0x25e8245f07d5e4873987293dad666afbe56a9608

Declared input and output (extensions.bazaar)

{
 "input": {
  "body": {
   "after": {
    "Content-Security-Policy-Report-Only": "default-src 'self'; script-src 'self' 'unsafe-inline'",
    "Referrer-Policy": "no-referrer",
    "Strict-Transport-Security": "max-age=600",
    "X-Frame-Options": "SAMEORIGIN"
   },
   "after_name": "release-42",
   "before": {
    "Content-Security-Policy": "default-src 'self'; script-src 'self'",
    "Referrer-Policy": "no-referrer",
    "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
    "X-Content-Type-Options": "nosniff",
    "X-Frame-Options": "DENY"
   },
   "before_name": "release-41"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
 },
 "output": {
  "type": "json",
  "example_truncated": true,
  "chars": 2282
 }
}

Try it (unpaid: shows the 402)

curl -si -X POST 'https://api.zfinia.com/x402/v1/security-header-diff' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'

The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/c14bff82c0fa/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"c14bff82c0fa"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on api.zfinia.com.