Overview
When converting a measured CORS response configuration into explicit origin/credential constraints, derive which symbolic origin classes can satisfy the actual CORS-check algorithm and where inclusion of credentials changes that predicate. Distinguish unrestricted noninclude wildcard, one exact serialized origin, opaque null and unsatisfiable declarations without returning the literal origin or claiming actual network access.
Protocol
x402 (POST)
Price
$0.0030
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
detect
Indexed
2026-11-02 17:26:31
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
Input Schema
{
"body": {
"url": "https://example.com/"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"billable": true,
"findings": [
{
"confidence": 100,
"evidence": [],
"limits": [],
"module": "fetch-cors-origin-credentials-symbolic-relation",
"state": "not_observed",
"value": {
"allow_credentials_consulted_for_feasible_include_origins": false,
"allow_origin_field_lines": 0,
"allow_origin_field_present": false,
"case_sensitive_true_credential_marker": false,
"conditional_algorithm_relation_not_actual_fetch_or_security_verdict": true,
"consulted_allow_credentials_field_lines": 0,
"credentials_mode_equivalence_classes": 2,
"exact_tuple_origin_serialization_value": false,
"include_always_fails_for_wildcard_origin": false,
"include_has_no_matching_origin": true,
"include_has_one_exact_matching_origin": false,
"main_response_header_programs": 1,
"noninclude_all_serialized_origins_match": false,
"noninclude_ignores_allow_credentials_field": true,
"noninclude_no_feasible_serialized_origin_matches": true,
"noninclude_requires_one_exact_serialized_origin": false,
"opaque_null_literal_origin_value": false,
"opaque_origin_include_relation_succeeds": false,
"opaque_origin_noninclude_relation_succeeds": false,
"origin_value_cannot_equal_any_serialized_origin_in_model": true,
"serialized_origin_kind_classes": 2,
"tuple_origin_include_has_exact_literal_match": false,
"tuple_origin_noninclude_has_exact_literal_match": false,
"tuple_origins_noninclude_all_match": false,
"wildcard_origin_value": false
},
"warnings": []
}
],
"known_count": 1,
"scope": {
"at": "2026-10-29T08:36:50.067Z",
"contact_values_returned": false,
"pages": 1,
"rendered": false,
"requests": 6
},
"warnings": []
},
"type": "json"
}