{"id":"security.header-audit","version":"1.0.0","category":"security","description":"Review supplied response headers for selected security and CORS issues without echoing values.","priceMicroUsdc":500,"priceRevision":"2026-09-13-testnet","pricingStatus":"experimental-unbenchmarked","inputSchema":{"type":"object","properties":{"headers":{"type":"object","maxProperties":100,"additionalProperties":{"type":"string","maxLength":8192}}},"required":["headers"],"additionalProperties":false},"outputSchema":{"type":"object","properties":{"headerNames":{"type":"array","items":{"type":"string"}},"findings":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"severity":{"type":"string"},"message":{"type":"string"}},"required":["rule","severity","message"],"additionalProperties":false}},"scope":{"type":"string"}},"required":["headerNames","findings","scope"],"additionalProperties":false},"example":{"headers":{"X-Content-Type-Options":"nosniff"}},"limits":{"inputBytes":131072,"outputBytes":65536,"networkTimeoutMs":0},"network":false,"sensitive":true,"route":"/v1/tools/security.header-audit"}