{
  "format": "delx/intent-card/v1",
  "id": "security-headers-score-api",
  "intent": "Security Headers Score for an agent workflow",
  "title": "Security Headers Score API for agents",
  "description": "Score the presence of five high-value browser security headers. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and production controls.",
  "keywords": [
    "Security Headers Score API",
    "Security Headers Score for agents",
    "pay per result API",
    "x402 API",
    "no API key"
  ],
  "updated_at": "2026-08-06",
  "canonical_url": "https://commerce.delx.ai/intents/security-headers-score-api",
  "machine_url": "https://commerce.delx.ai/intents/security-headers-score-api.json",
  "recommendation": {
    "tool_name": "util_security_headers_score",
    "service_name": "Delx Security Headers Score",
    "method": "POST",
    "resource": "https://api.delx.ai/api/v1/x402/security-headers-score",
    "price_usdc": "0.003",
    "payment_protocols": [
      "x402",
      "mpp"
    ],
    "input_schema": {
      "type": "object",
      "properties": {
        "headers": {
          "description": "Input field: headers.",
          "type": "object"
        }
      },
      "required": [
        "headers"
      ],
      "additionalProperties": true
    },
    "example_input": {
      "headers": {
        "Content-Security-Policy": "default-src 'self'",
        "Strict-Transport-Security": "max-age=31536000"
      }
    },
    "example_output": {
      "schema": "delx/util-security-headers-score/v1",
      "score": 40,
      "present": [
        "content-security-policy",
        "strict-transport-security"
      ],
      "missing": [
        "permissions-policy",
        "referrer-policy",
        "x-content-type-options"
      ],
      "advisory": "Header presence does not prove policy correctness."
    },
    "agentcash": {
      "buy": "npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/security-headers-score -m POST -H 'x-delx-source: intent-card-security-headers-score-api' --max-amount 0.003 -b '{\"headers\":{\"Content-Security-Policy\":\"default-src '\"'\"'self'\"'\"'\",\"Strict-Transport-Security\":\"max-age=31536000\"}}'",
      "max_amount_usdc": "0.003"
    }
  },
  "attribution": {
    "header": "x-delx-source",
    "value": "intent-card-security-headers-score-api"
  },
  "evidence": {
    "paid_openapi": "https://api.delx.ai/openapi.x402.json",
    "governed_portfolio": "https://api.delx.ai/x402-portfolio.json",
    "live_contract": "https://api.delx.ai/api/v1/x402/security-headers-score"
  }
}