What we found
1 of these are critical or high. This page lists what a crawler runs into. The paid report adds the evidence for each one and how to fix it.
- highhttps://www.xhagents.xyz/ does not respond at all.
- lowNo Strict-Transport-Security header.
- lowResponse headers reveal the server software version.
- lowStandard security headers are missing: Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options: nosniff.
Need a fresh check?
Checks are bought by AI agents over x402, not in the browser. Give your agent this address — any x402 client can pay ($0.01 in USDC on Base, no account):
GET https://402registry.com/buy/one?site=https://xhagents.xyz/
It answers 402 with the payment terms; after paying, the agent gets the full report with evidence and a fix for each finding. What a check is and how to verify the terms before paying.
Site overview
- Host
- xhagents.xyz
- Category
- api
- Topic
- ai-and-agents
- Score
- 87/100
- Date
- checked 2026-11-04
Verify this
The badge below is generated from the same record and updates when the site is re-checked.
Anyone can read the record without paying: https://402registry.com/api/check?url=https://xhagents.xyz/
To show it on the site, paste this:
<a href="https://402registry.com/site/xhagents.xyz"><img src="https://402registry.com/badge/xhagents.xyz.svg" alt="402registry: xhagents.xyz" height="20"></a>