{ "openapi": "3.0.1", "info": { "title": "CORS Headers & Preflight Checker | URL Audit", "description": "Test public URLs with configured origins and HTTP methods to inspect CORS headers, preflight responses and potential cross-origin policy risks.", "version": "0.0", "x-build-id": "KVxNfU6YLX05Pm5IB" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/quanmatrix~cors-policy-auditor/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-quanmatrix-cors-policy-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/quanmatrix~cors-policy-auditor/runs": { "post": { "operationId": "runs-sync-quanmatrix-cors-policy-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/quanmatrix~cors-policy-auditor/run-sync": { "post": { "operationId": "run-sync-quanmatrix-cors-policy-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "urls" ], "properties": { "urls": { "title": "Public URLs or API endpoints", "minItems": 1, "type": "array", "description": "Public HTTP(S) endpoints to audit. Exact duplicates are processed once; empty target arrays are rejected.", "items": { "type": "string" }, "default": [ "https://example.com" ] }, "testOrigin": { "title": "Primary test Origin", "type": "string", "description": "Origin header used for the primary simple request and preflight.", "default": "https://cors-audit.example" }, "additionalOrigins": { "title": "Additional test origins", "type": "array", "description": "Optional additional origins used to reveal reflection or policy inconsistency. Up to three are used.", "items": { "type": "string" }, "default": [] }, "requestedMethod": { "title": "Preflight method", "enum": [ "GET", "POST", "PUT", "PATCH", "DELETE" ], "type": "string", "description": "Method advertised in Access-Control-Request-Method.", "default": "POST" }, "requestHeaders": { "title": "Requested headers", "type": "array", "description": "Headers advertised in Access-Control-Request-Headers.", "items": { "type": "string" }, "default": [ "content-type" ] }, "previousSnapshots": { "title": "Previous CORS snapshots", "type": "object", "description": "Optional previous snapshot objects keyed by input URL. Reuse the output snapshot field to detect exact policy drift.", "default": {} }, "failOnRisk": { "title": "Fail run on risky CORS", "type": "boolean", "description": "After writing evidence, fail the run when a high/critical finding or score below minimumScore is observed. Useful for CI/CD.", "default": false }, "minimumScore": { "title": "Minimum acceptable score", "minimum": 0, "maximum": 100, "type": "number", "description": "Score threshold used when failOnRisk is enabled.", "default": 70 }, "maxUrls": { "title": "Maximum endpoints", "minimum": 1, "maximum": 250, "type": "integer", "description": "Maximum URLs processed in this run.", "default": 50 }, "concurrency": { "title": "Concurrency", "minimum": 1, "maximum": 12, "type": "integer", "description": "Maximum endpoints audited in parallel.", "default": 5 }, "timeoutSecs": { "title": "Request timeout", "minimum": 3, "maximum": 45, "type": "integer", "description": "Timeout per HTTP request.", "default": 20 }, "testPrivateNetwork": { "title": "Test Private Network Access", "type": "boolean", "description": "Send the Private Network Access preflight request header and flag unsafe allowance for reflected or credentialed origins.", "default": false }, "mcpConnectors": { "title": "MCP output connectors", "type": "array", "description": "Optional MCP connectors authorized in your Apify account. Use them to send or write this Actor result to tools such as Slack, Notion, GitHub, Sentry, Supabase, or another compatible MCP service." }, "mcpToolName": { "title": "MCP tool name", "type": "string", "description": "Optional exact MCP tool name. Leave blank to let the selected MCP action preset discover a compatible tool automatically.", "default": "" }, "mcpToolArguments": { "title": "MCP tool arguments", "type": "object", "description": "JSON object passed to the selected MCP tool. String values may use {{actor_title}}, {{result_summary}}, or {{result_json}} placeholders.", "default": {} }, "mcpFailOnError": { "title": "Fail run if MCP delivery fails", "type": "boolean", "description": "When enabled, an MCP delivery error fails the Actor run. Disabled by default so data extraction and intelligence results remain available even if the external destination is unavailable.", "default": false }, "mcpActionPreset": { "title": "MCP action preset", "enum": [ "AUTO_SAFE_WRITE", "SLACK_MESSAGE", "GITHUB_ISSUE", "NOTION_PAGE", "DATABASE_WRITE", "CUSTOM" ], "type": "string", "description": "Choose a safe action pattern. AUTO_SAFE_WRITE discovers a compatible non-destructive write tool automatically; use a specific preset for Slack, GitHub, Notion, or database delivery.", "default": "AUTO_SAFE_WRITE" } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }