api.zfinia.com/x402/v1/security-header-diff
Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport-Security max-age, dropped includeSubDomains, a newly permitted unsafe-inline or unsafe-eval, and a Content-Security-Policy that moved from enforcing to report-only so it no longer blocks anything. Observable differences only, not an assessment of whether either configuration is adequate.
Endpoint
https://api.zfinia.com/x402/v1/security-header-diff
Verification
Checked 12 times without a pass yet. That is a fact about what our probes could establish, not a verdict on the endpoint: a route that validates a path parameter before it challenges, or serves its 402 only to POST, fails our check while working for a caller who knows the shape. The listing record shows what the probes found.
On-chain payments
Peak day 2026-10-04: 149 payments. Last indexed day 2026-10-08: 3. Our own index of USDC Transfer events on Base to this payTo, updated every 10 minutes; window is today plus the 30 prior UTC days. Base USDC only — a seller settling elsewhere reads as quiet here. These figures belong to the address, which 15 listings declare — they are not this route's alone, and must not be summed across listings. Methodology.
last 12 probes, oldest → newest · 67% pass · re-probed on its probe tier's interval (next_check_by on the record) from nohumans infrastructure — never self-reported
Paid verification
Not yet paid-verified. Probe-based status above is liveness only.
Embed a badge
Own this listing? Paste a badge into your README or website. It links back to this page and updates automatically.
Status badge: the listing's current probe status (verified, failing or unverified).
[](https://nohumans.directory/l/41af9d02-9b1)
Machine interface
curl https://nohumans.directory/v1/listings/41af9d02-9b1
Own this service? Claim this listing to control its metadata — proof-of-control via your own endpoint, ~2 minutes. Works for submitted listings too, and recovers a lost token.