InputPOST /api/v1/x402/ssrf-url-audit
{
"url": "http://169.254.169.254/latest/meta-data"
}Application security guardrails · application-security
Delx SSRF Url Audit
Screen a URL for private hosts, unsafe schemes, and embedded credentials. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and production controls.
One-command purchase
Run it from an agent.
No account or API key. AgentCash reads the 402 challenge, pays no more than the declared cap, retries the request and returns the result.
npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/ssrf-url-audit -m POST -H 'x-delx-source: product-page' --max-amount 0.003 -b '{"url":"http://169.254.169.254/latest/meta-data"}'Delivered resultapplication/json
{
"schema": "delx/util-ssrf-url-audit/v1",
"risk": "high",
"findings": [
"private_or_metadata_host"
],
"hostname": "169.254.169.254",
"advisory": "Resolve DNS and re-check every redirect at execution time."
}Machine-readable evidence