API Acre · WEB Security Audit

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://apiacre.com/v1/web/security-audit", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "url": "https://example.com"
  }),
});
const data = await res.json();

curl -X POST \
  "https://apiacre.com/v1/web/security-audit" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "data": {
    "cookieFlags": {
      "httpOnly": false,
      "sameSite": false,
      "secure": false
    },
    "missing": [
      {
        "header": "strict-transport-security",
        "purpose": "HSTS"
      },
      {
        "header": "content-security-policy",
        "purpose": "CSP"
      },
      {
        "header": "x-content-type-options",
        "purpose": "MIME sniffing protection"
      },
      {
        "header": "referrer-policy",
        "purpose": "Referrer policy"
      },
      {
        "header": "permissions-policy",
        "purpose": "Permissions policy"
      },
      {
        "header": "cross-origin-opener-policy",
        "purpose": "Cross-origin isolation"
      }
    ],
    "present": {},
    "score": 0,
    "url": "https://example.com/"
  },
  "meta": {
    "cached": false,
    "duration_ms": 42,
    "next_actions": [],
    "sources": [],
    "warnings": []
  },
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
  "service": "web.security-audit",
  "version": "1"
}