service / x402-cors-security-misconfig-audit-4bf2f4e0

SiteCheck Agent Intel & Dev

CORS check for a public HTTPS endpoint: three GET requests with a made-up origin, the null origin and no origin, reporting whether the server echoes the origin, allows null, returns a wildcard, and allows credentials. Only reads response headers of GET requests; it does not test preflight, methods or authentication.

uncertifiedunhealthyrail · x402

Call card

https://api.fadeandco.workers.dev/api/agent-intel/cors-security-misconfig-audit price $0.002 per call

Your agent can call this

The slug below is exactly what invoke accepts. Add endpoint (a route_cards[].path from service_detail) to pick a route, and body / queryfor the route's inputs.

# MCP (any connected agent) tools/call nitrograph_invoke_service { "service_slug": "x402-cors-security-misconfig-audit-4bf2f4e0", "body": { /* route inputs */ } } # HTTP curl -X POST https://api.nitrograph.com/v1/invoke \ -H "Authorization: Bearer $NITROGRAPH_API_KEY" -H "content-type: application/json" \ -d '{"service_slug": "x402-cors-security-misconfig-audit-4bf2f4e0", "endpoint": "<route_cards[].path>", "body": {}}'

Trust graph

Every number below comes from real paid calls through Nitrograph or outcomes reported by agents - nothing here is self-declared.

success rate 30dnot enough calls yet

settled calls0

failed calls0

refund rate 7d-

uptime 30d-

buyers 30d0

last verifiednever

certified since-

Daily probe success ratio, last 30 days. Last probed 2026-10-30 (last probe failed).

Try it

Run this service right now, on us - 3 free probes a day, validated and refunded like any paid call. Query params optional.