English Français العربية

HTTP Headers Analyzer API

Official registry Security

HTTP header analysis — security headers, cache, server detection. x402 micropayment.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse http-headers-analyzer-api 'https://http-headers.api.klymax402.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "http-headers-analyzer-api": {
            "type": "sse",
            "url": "https://http-headers.api.klymax402.com/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. HTTP Headers Analyzer API
  2. Quickstart -- MCP
  3. Quickstart -- HTTP (x402)
  4. Tools
  5. Example agent prompts
  6. Payment
  7. Part of klymax402
  8. License

HTTP Headers Analyzer API

Analyze HTTP response headers -- security score, HSTS/CSP check, server detection, caching config. Score 0-100. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.

Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.

Quickstart -- MCP

Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):

{
  "mcpServers": {
    "http-headers": {
      "url": "https://http-headers.api.klymax402.com/mcp"
    }
  }
}

Quickstart -- HTTP (x402)

curl -X POST "https://http-headers.api.klymax402.com/api/analyze" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'
# -> 402 Payment Required, with an x402 payment challenge in the response body

Any x402-aware client (@x402/fetch, x402-agent-tools, ATXP) handles the 402 -> sign -> retry cycle automatically.

Tools

ToolMethodPathPriceDescription
network_analyze_headersPOST/api/analyze$0.003Analyze HTTP response headers for a URL
network_analyze_headers

Use this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON.

Parameters

NameTypeRequiredDescription
urlstringyesFull URL to analyze (e.g. https://example.com)

Example response:

{"url":"https://example.com","securityScore":85,"securityHeaders":{"hsts":true,"csp":true,"xFrameOptions":true,"xContentType":true,"referrerPolicy":false},"server":"nginx","caching":{"cacheControl":"max-age=3600","etag":true},"recommendations":["Add Referrer-Policy header"]}

When to use: security audits, DevOps monitoring, compliance checks, and verifying proper header configuration after deployment.

Not for: SSL certificate check (use security_check_ssl), web scraping (use web_scrape_to_markdown), GDPR compliance (use compliance_scan_gdpr).

Example agent prompts

  • "Analyze HTTP response headers of a URL for security and configuration"

Payment

  • Protocol: x402 -- HTTP-native pay-per-call, no signup, no API key
  • Network: Base L2 (eip155:8453)
  • Asset: USDC
  • Facilitator: Coinbase CDP (primary), PayAI (fallback)
  • Also reachable via ATXP (OAuth-wrapped x402, RFC 9728 protected-resource metadata)

Part of klymax402

100 x402 micropayment APIs for AI agents -- one wallet, USDC on Base, zero signup.

License

MIT

Frequently asked questions

What is HTTP Headers Analyzer API?

HTTP header analysis — security headers, cache, server detection. x402 micropayment.

How do I install HTTP Headers Analyzer API?

It runs as a remote server. In Claude Code: claude mcp add --transport sse http-headers-analyzer-api 'https://http-headers.api.klymax402.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does HTTP Headers Analyzer API need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is HTTP Headers Analyzer API open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains HTTP Headers Analyzer API?

It is published by Br0ski777. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.