Pricing

$4.99/month + usage

X-Content-Type-Options Header Checker - nosniff audit

Fetches URLs and validates the X-Content-Type-Options response header. Flags missing header and invalid values (expects nosniff) to help prevent MIME sniffing attacks. Outputs per-URL results plus SUMMARY and REPORT.

Pricing

$4.99/month + usage

Rating

0.0

(0)

Developer

Bikram Adhikari

Actor stats

Bookmarked

Total users

Monthly active users

21 days ago

Last modified

Configure MCP server with X-Content-Type-Options Header Checker - nosniff audit

Get a ready-to-use configuration for your MCP client with the X-Content-Type-Options Header Checker - nosniff audit Actor preconfigured at mcp.apify.com?tools=scrappy_garden/x-content-type-options-header-checker .

You can connect to the Apify MCP Server using clients like Tester MCP Client, or any other MCP client of your choice.

If you want to learn more about our Apify MCP implementation, check out our MCP documentation. To learn more about the Model Context Protocol in general, refer to the official MCP documentation or read our blog post.

Content-Type Header Validator

scrappy_garden/content-type-header-validator

Fetches URLs and validates the Content-Type header (MIME type + optional charset). Flags missing/mismatched types and recommends X-Content-Type-Options: nosniff. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

X-Frame-Options Header Checker - Prevent clickjacking

scrappy_garden/x-frame-options-header-checker

Fetches URLs and validates the X-Frame-Options response header (DENY/SAMEORIGIN). Flags missing/invalid/deprecated values and also detects CSP frame-ancestors. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

HSTS Header Checker - Strict-Transport-Security audit

scrappy_garden/hsts-header-checker

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Referrer-Policy Header Checker

scrappy_garden/referrer-policy-header-checker

Fetches URLs and validates the Referrer-Policy response header. Flags missing or risky policies (e.g., unsafe-url) and optionally checks against an expected policy. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Permissions-Policy Header Checker

scrappy_garden/permissions-policy-header-checker

Fetches URLs and analyzes the Permissions-Policy header (and legacy Feature-Policy). Flags missing headers, invalid syntax, and risky wildcard allowances for sensitive features like camera/microphone/geolocation. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Cross-Origin-Opener-Policy (COOP) Header Checker

scrappy_garden/cross-origin-opener-policy-header-checker

Fetches URLs and validates the Cross-Origin-Opener-Policy (COOP) and COOP-Report-Only response headers. Flags missing/invalid/unsafe policies to help with cross-origin isolation hardening. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Check Http Header Security — Data, Details & Metadata

tropical_quince/http-header-security-checker

Check http header security data at scale with this powerful Apify actor. Extracts data, details & metadata with automatic pagination and proxy rotation. Perfect for market research, competitive intelligence, and data-driven decision making.

Donny Nguyen

Markdown Header Text Splitter

codepoetry/markdown-splitter

Split Markdown into structured chunks using header hierarchy. Built with LangChain, it preserves metadata for RAG, documentation, and analysis. Configure headers, strip content, and integrate with vector databases. Ideal for AI workflows.

CodePoetry

HTTP Methods Checker

scrappy_garden/http-methods-checker

Probes which HTTP methods appear enabled for each URL (OPTIONS + per-method requests) and flags risky methods like TRACE. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Website Content Text Extractor

smart-digital/website-content-text-extractor

Extract visible text content from websites as structured JSON blocks. Supports multi-URL batch processing, header/footer/cookie exclusion, and optional form extraction. Perfect for content analysis and translation workflows.

My Smart Digital

5.0