POSTorigin reachablediscovery only

CORS Header Checker /check APIPOST /check · x402 API by CORS Header Checker

Sends a real request to any URL you provide, attaches an Origin header, and reads back all six standard cross-origin permission headers the server returns. Tells you whether cross-origin requests are enabled at all, whether your specific origin is permitted, and shows you every permission value exactly as the server sent it. Perfect for figuring out why a browser is blocking a request, confirming a freshly deployed service is configured correctly, or auditing whether a public API allows credentialed cross-origin calls.

https://cors-header-checker.underscoredone.com/check

What does this x402 API do?

CORS Header Checker /check API. This is an x402-gated POST API resource from CORS Header Checker. TOLL·402 did not invoke this route automatically because doing so was not considered safe. No normalized USD price is recorded; the listing names Base and Solana. No settled paid call has been verified.

Published price
No normalized USD price is recorded
Networks
Base · Solana
Latest evidence
TOLL·402 did not invoke this route automatically because doing so was not considered safe
Resource ID
15a82c13ed7bd894618b01ad
USE THIS RESOURCE

Start with a quote-only recipe. Payment signing stays in your project.

CODE
AI CODING TOOLS
quote-check.ts
const response = await fetch("https://cors-header-checker.underscoredone.com/check", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
  "type": "http",
  "method": "POST",
  "bodyType": "json",
  "bodyFieldNames": [
    "origin",
    "url"
  ],
  "pathParamNames": [],
  "queryParamNames": []
}),
});

console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));

// A valid 402 is a quote, not a completed paid call.

Review the provider input schema before running this non-read-only method. No payment code is included.

STATUS HISTORY

  1. Exact route checked

    not safely testable · potentially-mutating-method:POST

  2. Origin reachable

    HEAD https://cors-header-checker.underscoredone.com/ returned 301.

  3. Observed in cdp-bazaar

    The registry record was observed and retained with provenance.

What evidence supports this listing?

cdp-bazaarobserved 2026-08-11 · open source record ↗
origin checkHEAD https://cors-header-checker.underscoredone.com/ → 301 on 2026-08-15
route quotenot invoked automatically · potentially-mutating-method:POST · 2026-08-15

Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →

Which networks and payment options does it accept?

The normalized listing price is No normalized USD price is recorded. Raw protocol requirements remain visible below for implementation and audit use.

Baseexact10000 atomic · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Solanaexact10000 atomic · EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
CORS Header Checker POST /check · 15a82c x402 API · TOLL·402