{"id":"security.cookie-audit","version":"1.0.0","category":"security","description":"Check up to 50 Set-Cookie headers for security attributes and prefix rules; masks cookie values.","priceMicroUsdc":0,"priceRevision":"2026-10-06-free-validation","pricingStatus":"free-validation","inputSchema":{"type":"object","properties":{"setCookies":{"type":"array","items":{"type":"string","maxLength":8192},"maxItems":50}},"required":["setCookies"],"additionalProperties":false},"outputSchema":{"type":"object","properties":{"cookies":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"value":{"const":"[REDACTED]"},"secure":{"type":"boolean"},"httpOnly":{"type":"boolean"},"sameSite":{"type":"string"},"hasDomain":{"type":"boolean"},"findings":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"severity":{"type":"string"},"message":{"type":"string"}},"required":["rule","severity","message"],"additionalProperties":false}}},"required":["name","value","secure","httpOnly","sameSite","hasDomain","findings"],"additionalProperties":false}},"scope":{"type":"string"}},"required":["cookies","scope"],"additionalProperties":false},"example":{"setCookies":["demo=example; Secure; HttpOnly; SameSite=Lax; Path=/"]},"limits":{"inputBytes":131072,"outputBytes":65536,"networkTimeoutMs":0},"network":false,"sensitive":true,"route":"/v1/tools/security.cookie-audit","priceMicroUsd":0,"exampleUrl":"https://agent-utilities.agent-utilities.workers.dev/v1/content/examples/security.cookie-audit","page":"https://agent-utilities.agent-utilities.workers.dev/tools/security.cookie-audit","execution":{"method":"POST","url":"https://agent-utilities.agent-utilities.workers.dev/v1/tools/security.cookie-audit","requiredHeaders":{"Content-Type":"application/json"},"authentication":"none","paymentRequired":false,"chargedMicroUsd":"0","scope":"All available hosted tools are free during validation. Existing input, output and source-access limits apply. Full tools and the combined report share capacity limits that count attempts, including failed executions and marked checks; they are not per-user allowances. No account, API key, wallet or funding is needed. Existing credit balances are preserved. Live Reddit remains unavailable until configured. Paid billing will not resume automatically."}}