Summary
Analyzes HTTP response headers from any URL and returns structured security data: CSP, HSTS, X-Frame-Options, and other protection headers, plus cache directives and server fingerprinting. Exposes a single tool that fetches a page and parses the headers into categorized findings. Operates over SSE transport and integrates x402 micropayments, meaning each analysis call costs a small amount. Useful when you need to audit header configurations across multiple domains, check if security policies are properly set, or automate reconnaissance tasks that would otherwise require manual curl inspection. The hosted API endpoint means no local dependencies beyond the MCP connection.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Tools
Public tool metadata for what this MCP can expose to an agent.
1 tools
network_analyze_headersUse this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON. Returns: 1. allHeaders (raw key-value map) 2. securityScore (0-101 params
Use this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON. Returns: 1. allHeaders (raw key-value map) 2. securityScore (0-10
Parameters* required
urlstringFull URL to analyze (e.g. https://example.com)
HTTP Headers Analyzer API
Analyze HTTP response headers -- security score, HSTS/CSP check, server detection, caching config. Score 0-100. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.
Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.
Quickstart -- MCP
Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):
{
"mcpServers": {
"http-headers": {
"url": "https://http-headers.api.klymax402.com/mcp"
}
}
}
Quickstart -- HTTP (x402)
curl -X POST "https://http-headers.api.klymax402.com/api/analyze" \
-H "Content-Type: application/json" \
-d '{"url":"https://example.com"}'
# -> 402 Payment Required, with an x402 payment challenge in the response body
Any x402-aware client (@x402/fetch, x402-agent-tools, ATXP) handles the 402 -> sign -> retry cycle automatically.
Tools
| Tool | Method | Path | Price | Description |
|---|---|---|---|---|
network_analyze_headers | POST | /api/analyze | $0.003 | Analyze HTTP response headers for a URL |
network_analyze_headers
Use this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON.
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
url | string | yes | Full URL to analyze (e.g. https://example.com) |
Example response:
{"url":"https://example.com","securityScore":85,"securityHeaders":{"hsts":true,"csp":true,"xFrameOptions":true,"xContentType":true,"referrerPolicy":false},"server":"nginx","caching":{"cacheControl":"max-age=3600","etag":true},"recommendations":["Add Referrer-Policy header"]}
When to use: security audits, DevOps monitoring, compliance checks, and verifying proper header configuration after deployment.
Not for: SSL certificate check (use security_check_ssl), web scraping (use web_scrape_to_markdown), GDPR compliance (use compliance_scan_gdpr).
Example agent prompts
- "Analyze HTTP response headers of a URL for security and configuration"
Payment
- Protocol: x402 -- HTTP-native pay-per-call, no signup, no API key
- Network: Base L2 (
eip155:8453) - Asset: USDC
- Facilitator: Coinbase CDP (primary), PayAI (fallback)
- Also reachable via ATXP (OAuth-wrapped x402, RFC 9728 protected-resource metadata)
Part of klymax402
100 x402 micropayment APIs for AI agents -- one wallet, USDC on Base, zero signup.
- Catalog: https://klymax402.com/llms.txt
- Full API reference: https://klymax402.com/llms-full.txt
- Live stats: https://klymax402.com/stats
License
MIT
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
