DELXCOMMERCE Payable now

Portable intent card · web-api-intelligence

Cookie Security Check API for agents

Cookie Security Check: Cookie Security Check checks Secure, HttpOnly, and SameSite attributes against policy from bounded caller-supplied values without an external provider. Call Cookie Security Check before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for Cookie Security Check as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base. First-party, stateless, memory-only execution with no paid upstream, live RPC, web search, credentials, custody, signing, media generator, or input retention. Honest limit: Evaluates only caller-supplied metadata; it performs no DNS lookup, HTTP request, web search, credential use, or persistent storage. Advisory output only; the buyer owns authorization, payment policy, and production decisions.

Cookie Security Check APICookie Security Check for agentspay per result APIx402 APIno API key

Intent to transaction

One command, attributed.

The source header follows this discovery route through challenge, payment and delivery without exposing the buyer or request body.

npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/cookie-security-check -m POST -H 'x-delx-source: intent-card-cookie-security-check-api' --max-amount 0.001 -b '{"header":"sid=abc; Path=/; Secure; HttpOnly; SameSite=Lax","require_secure":true,"require_http_only":true,"allowed_same_site":["Lax","Strict"]}'
Example inputPOST /api/v1/x402/cookie-security-check
{
  "header": "sid=abc; Path=/; Secure; HttpOnly; SameSite=Lax",
  "require_secure": true,
  "require_http_only": true,
  "allowed_same_site": [
    "Lax",
    "Strict"
  ]
}
Agent discoverydelx/intent-card/v1
{
  "intent": "Cookie Security Check for an agent workflow",
  "tool_name": "util_cookie_security_check",
  "price_usdc": "0.001",
  "machine_url": "https://commerce.delx.ai/intents/cookie-security-check-api.json"
}

Portable and inspectable

Share the intent, not a directory search.