Concierge Agent · Concierge Security Headers

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://conc-exe.xyz/api/concierge-security-headers", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "allowlist": [
      "*.example.com"
    ],
    "authorized": true,
    "target": "https://app.example.com"
  }),
});
const data = await res.json();

curl -X POST \
  "https://conc-exe.xyz/api/concierge-security-headers" \
  -H "Content-Type: application/json" \
  -d '{"allowlist":["*.example.com"],"authorized":true,"target":"https://app.example.com"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "checks": [
    {
      "header": "x-content-type-options",
      "id": "x-content-type-options",
      "present": true
    }
  ],
  "disclaimer": "Passive header review only.",
  "kind": "security-headers",
  "ok": true,
  "summary": {
    "grade": "moderate",
    "present": 4,
    "total": 6
  },
  "target": {
    "hostname": "app.example.com",
    "origin": "https://app.example.com"
  }
}