v2

latestOpenAPI 3.1.0Proprietary2026-07-264017.4 KB

Agent tools

Run security-headers scan (agent API)

Unauthenticated, non-intrusive HTTP security headers scan for autonomous agents. No Turnstile token required. Rate limited to 10 requests/minute per client IP.

post/api/agent/tools/security-headers/execute

Request body

targetstring required

Scan target. For security-headers prefer a full URL; for email-security use an apex domain.

Example request

{
  "target": "example.com"
}

Response

Scan completed.

successtrue

toolName'security-headers' | 'email-security'

targetstring

grade'A+' | 'A' | 'B' | 'C' | 'D' | 'F' | 'null' nullable

gradeScorenumber nullable

resultobject nullable

errorstring nullable

uiUrlstring uri

skillUrlstring uri