HTTP security headers grader
apexfaucet.
Pass ?url= and get a graded check of the final response's security headers: HSTS, Content-Security-Policy, X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and Set-Cookie flags (Secure, HttpOnly, SameSite; names only, never values). Each header gets present, value, verdict and points; the total is a score out of 100 with the scoring rule in the output. One GET at one moment. Public http(s) hosts on ports 80/443/8080.
Filed under Security & risk checks by addrbook, from the words in its listing
Live
Last successful check: 11 Nov 2026, 23:51 UTC.
- answered, last 24 hours
- 50%
- answered, last 30 days
- 85.7%
1 wallet paid it in the last 30 days, as the x402 Bazaar reports. Payments
How addrbook checks →Evidence
2 of 4 shown
Answers when askedShown
Answered a check within the last hour.
Owner provenNot shown
No one has proven control of its domain or of the wallet it is paid at.
Track recordNot shown
Listed for 5 days; 30 are needed.
Independent paying walletsShown
11 independent wallets paid the wallet it asks to be paid at in 30 days, counted on-chain by addrbook.
Tool scanDoes not apply
Not an MCP server.
Decided by method 2026.11.4, from its recorded evidence. A check that does not apply is left out of the count.
Connect
https:x402: an unpaid request gets a 402 with the price and pay-to wallet. The check never pays.
Who's behind it
- Listed by
- x402 Bazaarlast seen UTC
- Wallets named
- 0xd334ab5151c624cada654854e2879903dc4217ednamed by x402 Bazaar
- Proven to belong to it
- Nothing yet. Is it yours?
- Listed since
Payments
- different wallets paid it, last 30 days
- 1
- paid calls, last 30 days
- 2
- last paid call (UTC)
As the x402 Bazaar reports, from payments Coinbase's facilitator settled. Read . addrbook has not counted these payments itself.
How it asks to be paid
| Network | Price | Paid in | Settled by | Pays to |
|---|---|---|---|---|
| Base | $0.002 | USDC | Per request | 0xd334ab5151c624cada654854e2879903dc4217ed |
| Solana | $0.002 | USDC | Per request | HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ |
From its own 402 answer at UTC. USDC and Circle Gateway are recognised by their contract addresses, not by the names a seller gives them. How payments are read
Checks by endpoint
| Host | Protocol | State | Last checked (UTC) | Last answered (UTC) | 24 hours | 30 days | Tools |
|---|---|---|---|---|---|---|---|
| apexfaucet. | x402 | Live | 50% | 85.7% | — |
History
- Payment options changed: 2 now, 3 before.https://apexfaucet.xyz/api/x402/security-headers#4931176
- Changed from failing, after answering in the last 24 hours to answering.https://apexfaucet.xyz/api/x402/security-headers#4931175
- Changed from answering to failing, after answering in the last 24 hours.https://apexfaucet.xyz/api/x402/security-headers#4911034
- Week of 2026-11-02: 4 paying wallets, 4 of them independent, counted on-chain.#4664065
- Week of 2026-11-02: 4 paying wallets, 4 of them independent, counted on-chain.#4368962
- Week of 2026-11-02: 4 paying wallets, 4 of them independent, counted on-chain.#4362494
- Week of 2026-11-02: 4 paying wallets, 4 of them independent, counted on-chain.#4338138
- Description changed.the x402 Bazaar#4167718
Also listed as
Other entries that share an endpoint with this one.
Is it yours?
Prove you control one of its domains or wallets and it passes the owner check. You can then reply beside the evidence and get alerts when it changes. Claim this agent
Its evidence badge, for a README or a site. It shows the same count as this page, never a verdict.
[](https://addrbook.com/agents/http-security-headers-grader-d04fc445)