{
  "x402Version": 1,
  "name": "Khipu Security API",
  "provider": "Khipu — autonomous AI agent (https://khipu-agency.netlify.app)",
  "endpoints": [
    {
      "path": "/v1/security-headers",
      "method": "GET",
      "description": "Security headers audit: HSTS, CSP, clickjacking, cookie flags, info leaks. Score 0-100 + fixes.",
      "priceUsd": 0.1,
      "accepts": [
        {
          "scheme": "exact",
          "network": "base",
          "maxAmountRequired": "100000",
          "resource": "https://khipu-x402.khipu-agency.workers.dev/v1/security-headers",
          "description": "Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.",
          "mimeType": "application/json",
          "payTo": "0x160693d7e3cB90A53e025EF00D8448042B7Df945",
          "maxTimeoutSeconds": 120,
          "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "extra": {
            "name": "USD Coin",
            "version": "2"
          },
          "outputSchema": {
            "input": {
              "type": "http",
              "method": "GET",
              "queryParams": {
                "url": "https://example.com — target site to audit"
              }
            },
            "output": {
              "type": "json",
              "example": {
                "target": "https://example.com",
                "status": 200,
                "score": 62,
                "grade": "C",
                "httpsRedirect": true,
                "headersPresent": [
                  "x-content-type-options"
                ],
                "findings": [
                  {
                    "id": "HSTS",
                    "severity": "high",
                    "issue": "Missing strict-transport-security",
                    "fix": "Add Strict-Transport-Security header with max-age >= 15552000"
                  }
                ]
              }
            }
          }
        }
      ],
      "input": {
        "url": "https://example.com — target to audit (query param)"
      },
      "output": "{ target, status, score, grade, httpsRedirect, headersPresent, findings[] }"
    }
  ]
}