{
"openapi": "3.1.1",
"info": {
"title": "HTTP Technology Explorer API",
"version": "1.0.0",
"summary": "Headers, compression, caching, HTTP/2-3 hints, redirects, security and tech stack for a URL.",
"description": "Every endpoint performs the same calculation as the human page and returns inputs, result, units, assumptions, sources, warnings and computedAt. MCP endpoint: /mcp."
},
"servers": [
{
"url": "https://httptechnologyexplorer.usefulweb.site"
}
],
"paths": {
"/api/v1/calculate": {
"post": {
"operationId": "calculate",
"summary": "Headers, compression, caching, HTTP/2-3 hints, redirects, security and tech stack for a URL.",
"description": "Fetches a public URL (or analyses pasted raw response headers and HTML) and explains what the response reveals: redirect target and HTTPS upgrade, HTTP/2 and HTTP/3 advertisement (Alt-Svc), compression, caching (Cache-Control, ETag, Last-Modified, Age, Vary), security headers, and server, framework, CMS and analytics fingerprints with a confidence level for each.\n\nMethodology:\n- Live mode: one GET of the URL through the platform's SSRF-guarded fetcher (redirects followed and re-validated, ports 80/443 only, body capped at 512 KiB), plus a small GET of the http:// variant to see whether plain HTTP is upgraded to HTTPS.\n- The fetcher speaks HTTP/1.1, so HTTP/2 and HTTP/3 support is inferred from the Alt-Svc header (h2/h3); pasted headers show the real protocol in their status line.\n- Caching follows RFC 9111: no-store, private, no-cache, s-maxage > max-age > Expires-Date; CDN-Cache-Control/Surrogate-Control override for shared caches.\n- Security headers use the same deterministic rules as HeaderLens (HSTS, CSP, nosniff, framing, Referrer-Policy, Permissions-Policy, validators, Vary, compression, version disclosure).\n- Technology fingerprints come from response headers (Server, X-Powered-By, vendor headers) and HTML markers (meta generator, well-known asset paths such as /wp-content/, /_next/static/, /_nuxt/). Confidence: high = explicit self-identification, medium = characteristic path, low = weak hint.",
"tags": [
"infrastructure"
],
"x-mcp-tool": "http_technology_explorer",
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HttpTechnologyExplorerInput"
},
"examples": {
"example1": {
"summary": "WordPress shop behind nginx (pasted)",
"value": {
"mode": "paste",
"rawHeaders": "HTTP/1.1 301 Moved Permanently\nLocation: https://www.example-shop.test/\nServer: nginx\n\nHTTP/2 200\nserver: nginx/1.24.0\ndate: Mon, 12 Oct 2026 10:00:00 GMT\ncontent-type: text/html; charset=UTF-8\ncontent-encoding: br\nvary: Accept-Encoding, Cookie\ncache-control: public, max-age=300, s-maxage=600\netag: \"5f2a-63c1\"\nlast-modified: Mon, 12 Oct 2026 09:30:00 GMT\nage: 42\nx-powered-by: PHP/8.2.12\nlink: ; rel=\"https://api.w.org/\"\nalt-svc: h3=\":443\"; ma=86400\nstrict-transport-security: max-age=31536000; includeSubDomains\nx-content-type-options: nosniff\nreferrer-policy: strict-origin-when-cross-origin\nset-cookie: session=abc123; Path=/; Secure; HttpOnly; SameSite=Lax",
"html": "Example shop\n\n\n\n\n