InputPOST /api/v1/x402/csp-source-check
{
"header": "default-src 'self'; connect-src 'self' https://api.example.com",
"directive": "connect-src",
"source": "https://api.example.com"
}Web and API intelligence · web-api-intelligence
CSP Source Check
CSP Source Check: CSP Source Check checks whether a caller-supplied source is present in one CSP directive from bounded caller-supplied values without an external provider. Call CSP Source Check before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for CSP Source Check as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base. First-party, stateless, memory-only execution with no paid upstream, live RPC, web search, credentials, custody, signing, media generator, or input retention. Honest limit: Evaluates only caller-supplied metadata; it performs no DNS lookup, HTTP request, web search, credential use, or persistent storage. Advisory output only; the buyer owns authorization, payment policy, and production decisions.
One-command purchase
Run it from an agent.
No account or API key. AgentCash reads the 402 challenge, pays no more than the declared cap, retries the request and returns the result.
npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/csp-source-check -m POST -H 'x-delx-source: product-page' --max-amount 0.001 -b '{"header":"default-src '"'"'self'"'"'; connect-src '"'"'self'"'"' https://api.example.com","directive":"connect-src","source":"https://api.example.com"}'Delivered resultapplication/json
{
"schema": "delx/util-csp-source-check/v1",
"operation": "web_reliability:csp_source_check",
"status": "pass",
"result": {
"directive": "connect-src",
"source": "https://api.example.com",
"present": true,
"sources": [
"'self'",
"https://api.example.com"
]
},
"evidence": {
"input_sha256": "28ce2f05a29beab331ef11c94ccca09b3de52f20fc1aaf0a876da89ecbba12bd",
"retained": false,
"external_calls": 0
}
}Machine-readable evidence