Analyze a CSP policy
https://www.brainiac.software/api/v1/security-configuration/csp-policy-analyzeOverview
Read Content-Security-Policy from a public response or from policy text supplied by the caller. unsafe-inline, unsafe-eval, a script wildcard, and data: scripts are confirmed. This is not a full policy review.
Protocol
x402 (POST)
Price
$0.04
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
security-configuration
Provider
BRAINIAC.software
Source
bazaar
Indexed
2026-11-05 11:42:08
Health
Status
healthy
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"body": {
"contentSecurityPolicy": "default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' *"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"checkedAt": "2026-11-03T16:00:00.000Z",
"confirmedCount": 3,
"directives": [
{
"name": "default-src",
"value": "'self'"
},
{
"name": "script-src",
"value": "'unsafe-inline' 'unsafe-eval' *"
}
],
"enforced": true,
"finalUrl": "",
"findings": [
{
"code": "csp_unsafe_inline",
"detail": "script-src or default-src allows unsafe-inline.",
"kind": "confirmed",
"subject": "script-src"
},
{
"code": "csp_unsafe_eval",
"detail": "script-src or default-src allows unsafe-eval.",
"kind": "confirmed",
"subject": "script-src"
},
{
"code": "csp_script_wildcard",
"detail": "script-src or default-src allows every host.",
"kind": "confirmed",
"subject": "script-src"
}
],
"httpStatus": 0,
"limitations": [
"These checks do not show that a website is secure.",
"Only one public GET is sent per supplied URL or path. No login, brute force, exploit, or credential test is attempted.",
"A path or endpoint is requested only when the caller lists it.",
"Cookie values are not copied into the response.",
"An unavailable check means that configuration was not in the response."
],
"recommendationCount": 0,
"requestedUrl": "",
"requestsSent": 0,
"securityDetermined": false,
"status": "checked",
"unavailableCount": 0,
"websiteSecure": false
},
"type": "json"
}