service / x402-cors-misconfig-ae4202c3

SiteCheck Web Intel

Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin.

uncertifiedunhealthyrail · x402

Call card

https://api.webintel-api.workers.dev/api/security/cors-misconfig price $0.002 per call

Your agent can call this

The slug below is exactly what invoke accepts. Add endpoint (a route_cards[].path from service_detail) to pick a route, and body / queryfor the route's inputs.

# MCP (any connected agent) tools/call nitrograph_invoke_service { "service_slug": "x402-cors-misconfig-ae4202c3", "body": { /* route inputs */ } } # HTTP curl -X POST https://api.nitrograph.com/v1/invoke \ -H "Authorization: Bearer $NITROGRAPH_API_KEY" -H "content-type: application/json" \ -d '{"service_slug": "x402-cors-misconfig-ae4202c3", "endpoint": "<route_cards[].path>", "body": {}}'

Trust graph

Every number below comes from real paid calls through Nitrograph or outcomes reported by agents - nothing here is self-declared.

success rate 30dnot enough calls yet

settled calls0

failed calls0

refund rate 7d-

uptime 30d-

buyers 30d0

last verifiednever

certified since-

Daily probe success ratio, last 30 days. Last probed 2026-11-01 (last probe failed).

Try it

Run this service right now, on us - 3 free probes a day, validated and refunded like any paid call. Query params optional.