headers.use.x402atlas.com
https://headers.use.x402atlas.comShares a payout wallet with 39 other endpoints — its adoption is attributed from that shared wallet's traffic, not earned exclusively.
Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.
Reliability & health
Uptime and response time from our own unpaid probes, plus the reliability score built from them.
Uptime
96.7% avgResponse time
p50 49ms · p95 70msData table
| Bucket | Uptime | Probes | Response time |
|---|---|---|---|
| 7/22/2026, 12:00:00 AM | 100% | 1 | 44ms |
| 7/23/2026, 12:00:00 AM | 100% | 1 | 83ms |
| 7/24/2026, 12:00:00 AM | 100% | 1 | 45ms |
| 7/25/2026, 12:00:00 AM | 100% | 1 | 47ms |
| 7/26/2026, 12:00:00 AM | 100% | 1 | 54ms |
| 7/27/2026, 12:00:00 AM | 100% | 1 | 51ms |
| 7/28/2026, 12:00:00 AM | 100% | 1 | 60ms |
| 7/29/2026, 12:00:00 AM | 100% | 1 | 44ms |
| 7/30/2026, 12:00:00 AM | 100% | 1 | 59ms |
| 7/31/2026, 12:00:00 AM | 100% | 1 | 44ms |
| 8/1/2026, 12:00:00 AM | 100% | 1 | 43ms |
| 8/2/2026, 12:00:00 AM | 100% | 1 | 47ms |
| 8/3/2026, 12:00:00 AM | 100% | 1 | 50ms |
| 8/4/2026, 12:00:00 AM | 100% | 1 | 39ms |
| 8/5/2026, 12:00:00 AM | 100% | 1 | 44ms |
| 8/6/2026, 12:00:00 AM | 100% | 1 | 43ms |
| 8/7/2026, 12:00:00 AM | 100% | 1 | 41ms |
| 8/8/2026, 12:00:00 AM | 100% | 1 | 54ms |
| 8/9/2026, 12:00:00 AM | 0% | 1 | — |
| 8/10/2026, 12:00:00 AM | 100% | 1 | 54ms |
| 8/11/2026, 12:00:00 AM | 100% | 1 | 44ms |
| 8/12/2026, 12:00:00 AM | 100% | 1 | 51ms |
| 8/13/2026, 12:00:00 AM | 100% | 1 | 59ms |
| 8/14/2026, 12:00:00 AM | 100% | 1 | 50ms |
| 8/15/2026, 12:00:00 AM | 100% | 1 | 62ms |
| 8/16/2026, 12:00:00 AM | 100% | 1 | 60ms |
| 8/17/2026, 12:00:00 AM | 100% | 1 | 55ms |
| 8/18/2026, 12:00:00 AM | 100% | 6 | 59ms |
| 8/19/2026, 12:00:00 AM | 100% | 21 | 48ms |
| 8/20/2026, 12:00:00 AM | 100% | 15 | 52ms |
- Availability
- 99
- Latency
- 100
- Security
- 100
- Transparency
- 61
- Activity
- 17
How often it was reachable when we probed it (weight 35%).
How quickly it answers when it is up — fast scores high (weight 20%).
Whether it serves over working TLS / https (weight 15%).
Whether the operator disclosed what it does — description, schema, identity (weight 15%).
Observed on-chain payments to this endpoint's wallet — transactions, volume, and distinct paying wallets over the last month (weight 15%; not yet measured when we have not seen its wallet settle).
Confidence 100% — how much probe evidence backs this score. A thin history is flagged, not hidden.
See the scoring methodology for exactly how each number is computed.
Payment
- Currencies
- USDC
- Networks
- arbitrum, base, polygon, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
- Facilitator
- unknown
- SDK
- unknown
Operator
- Company
- inferred — unknown
- Jurisdiction
- —
- Registrar
- Amazon Registrar, Inc.
- Domain registered
- 2025-10-17
- Hosting network
- AT-88-Z
- Hosting country
- —
Operator context is derived from public RDAP/TLS records and unverified. Company and country are only available for endpoints that publish them (an OV/EV TLS certificate or a non-redacted domain record); most endpoints are CDN-fronted and disclose neither.
On-chain activity (base)
Payments per day
last payment 8/20/2026Data table
| Day | Payments | Volume (USD) | Paying wallets |
|---|---|---|---|
| 7/22/2026 | 4 | 0.13 | 2 |
| 7/23/2026 | 29 | 0.36 | 1 |
| 7/27/2026 | 2 | 0.02 | 2 |
| 8/1/2026 | 1 | 0.01 | 1 |
| 8/4/2026 | 1 | 0.01 | 1 |
| 8/12/2026 | 1 | 0.01 | 1 |
| 8/13/2026 | 2 | 0.02 | 2 |
| 8/14/2026 | 1 | 0.01 | 1 |
| 8/15/2026 | 1 | 0.01 | 1 |
| 8/16/2026 | 1 | 0.01 | 1 |
| 8/18/2026 | 1 | 0.01 | 1 |
| 8/20/2026 | 1 | 0.01 | 1 |
This payout wallet is shared: figures cover all 40 endpoints paid at it, since payments cannot be attributed to one of them. Only payments settled on chains and facilitators we index.
Linked by wallet — likely same operator
On-chain agent identity and the x402 endpoint that shares its settlement wallet.
Response schema
{
"properties": {
"headers": {
"description": "Graded, normalized security headers. Each field is null when the header is absent from the response",
"properties": {
"content_security_policy": {
"type": [
"string",
"null"
]
},
"permissions_policy": {
"type": [
"string",
"null"
]
},
"referrer_policy": {
"type": [
"string",
"null"
]
},
"server": {
"description": "Server header value, if disclosed by the target",
"type": [
"string",
"null"
]
},
"strict_transport_security": {
"properties": {
"include_subdomains": {
"type": "boolean"
},
"max_age": {
"description": "Parsed max-age in seconds; null if absent or unparseable",
"type": [
"integer",
"null"
]
},
"preload": {
"type": "boolean"
},
"value": {
"description": "Raw Strict-Transport-Security header value",
"type": "string"
}
},
"type": [
"object",
"null"
]
},
"x_content_type_options": {
"type": [
"string",
"null"
]
},
"x_frame_options": {
"type": [
"string",
"null"
]
},
"x_powered_by": {
"description": "X-Powered-By header value, if disclosed by the target",
"type": [
"string",
"null"
]
}
},
"type": "object"
},
"queried_at": {
"description": "UTC timestamp the audit was performed",
"format": "date-time",
"type": "string"
},
"status_code": {
"description": "HTTP status code returned by the target for the HEAD request",
"type": "integer"
},
"url": {
"description": "The audited URL, exactly as given",
"type": "string"
},
"warnings": {
"description": "Human-readable posture advisories, e.g. missing or weak headers",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"url",
"status_code",
"queried_at",
"headers",
"warnings"
],
"type": "object"
}