Scan Headers

Perform live HTTP GET and analyze security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy. Use to audit live w

liveverifiedunknown~5s typical

mcpprobedcontrastapi

$0.0020

per call

plus $0.001 platform fee per run

Open MCP server; Cracked bills routing only

Provider Upstream docs

$Set up https://cracked-ai-pearl.vercel.app/SKILL.md, then use Cracked to run mcp-com-contrastcyber-api /scan_headers for me.

Input

Field	Type	Description
domain*	string	Domain to scan live HTTP headers for (e.g. 'example.com', 'api.github.com')
include	string ( \| full)	Detail level. Default ('') returns slim findings — raw header values capped at 500 chars w default ""

Call it

curl

curl https://cracked-ai-pearl.vercel.app/v1/run \
  -H "Authorization: Bearer ck_live_..." -H "content-type: application/json" \
  -d '{"provider":"mcp-com-contrastcyber-api","endpoint":"/scan_headers","input":{"domain":"...","include":""}}'

cli

npx cracked-ai run -p mcp-com-contrastcyber-api -e /scan_headers -i '{"domain":"...","include":""}'

mcp

run_tool({ provider: "mcp-com-contrastcyber-api", endpoint: "/scan_headers", input: {"domain":"...","include":""} })

Try it

Runs against your signed-in workspace balance. Sign in if you have not.