Clickjacking Risk
Paid clickjacking-protection audit (cycle 115) — fetches the page headers + body, audits (a) X-Frame-Options presence + value (DENY/SAMEORIGIN valid, ALLOW-FROM deprecated per Chrome/Edge), (b) CSP frame-ancestors policy across all CSP headers incl. report-only, classifies policy as none/self/wildcard/domain_list/domain_list_with_wildcard, (c) meta http-equiv X-Frame-Options (insecure — header is
- Price per call
- $0.000
- Chain
- Base
- Method
- GET
- Paid calls · 30 days
- 0
Call it from code
This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.
import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });
const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://tfgmq-38-190-144-122.run.pinggy-free.link/api/clickjacking-risk", { method: "GET" });
console.log(await res.json());https://tfgmq-38-190-144-122.run.pinggy-free.link/api/clickjacking-risk