Audit cookie attributes
https://www.brainiac.software/api/v1/security-configuration/cookie-auditOverview
Check Secure, HttpOnly, and SameSite on Set-Cookie headers from one public response or from cookie lines supplied by the caller. Cookie values are not returned.
Protocol
x402 (POST)
Price
$0.03
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
security-configuration
Provider
BRAINIAC.software
Source
bazaar
Indexed
2026-11-05 11:42:08
Health
Status
healthy
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"body": {
"setCookies": [
"session=sessionsecret; Path=/"
],
"transport": "https"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"checkedAt": "2026-11-03T16:00:00.000Z",
"confirmedCount": 1,
"cookies": [
{
"httpOnly": false,
"name": "session",
"sameSite": "",
"secure": false
}
],
"finalUrl": "",
"findings": [
{
"code": "cookie_secure_missing",
"detail": "This cookie was set on HTTPS without the Secure attribute.",
"kind": "confirmed",
"subject": "session"
},
{
"code": "cookie_httponly_missing",
"detail": "This cookie does not set HttpOnly. Not every cookie needs that attribute.",
"kind": "recommendation",
"subject": "session"
},
{
"code": "cookie_samesite_missing",
"detail": "SameSite was not set.",
"kind": "recommendation",
"subject": "session"
}
],
"httpStatus": 0,
"limitations": [
"These checks do not show that a website is secure.",
"Only one public GET is sent per supplied URL or path. No login, brute force, exploit, or credential test is attempted.",
"A path or endpoint is requested only when the caller lists it.",
"Cookie values are not copied into the response.",
"An unavailable check means that configuration was not in the response."
],
"recommendationCount": 2,
"requestedUrl": "",
"requestsSent": 0,
"securityDetermined": false,
"status": "checked",
"transport": "https",
"unavailableCount": 0,
"websiteSecure": false
},
"type": "json"
}