Playground

See exactly what you'll get back.

A sample request and response for every API in the catalog. No signup, no setup. When you're ready, the same call runs for real with a free key.

Choose an API

Request · HTTP

GET /security-headers/v1/scan?url=https://example.com&apikey=YOUR_KEY HTTP/1.1
Host: api.apicodex.io

Response · JSON200 OK

{
"url": "https://example.com",
"final_url": "https://example.com/",
"status": 200,
"score": 72,
"grade": "C",
"present": {
  "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload",
  "X-Content-Type-Options": "nosniff",
  "X-Frame-Options": "SAMEORIGIN",
  "Referrer-Policy": "strict-origin-when-cross-origin",
  "Server": "cloudflare"
},
"missing": [
  "Content-Security-Policy",
  "Permissions-Policy",
  "Cross-Origin-Opener-Policy",
  "Cross-Origin-Resource-Policy"
],
"recommendations": [
  {
    "title": "Add a Content-Security-Policy",
    "severity": "High",
    "description": "No Content-Security-Policy header was returned. CSP is the strongest defense against cross-site scripting (XSS) and data-injection attacks.",
    "header": "Content-Security-Policy"
  }
]
}

Sample values for illustration. Get a free key to run real calls against live data.

Run it for real in minutes

Each API page lists its current quota, pricing, and authentication details.

Get your free API key Browse all APIs Read the docs