SNHP · Domain Security

Snhp Dev Domain Security

Domain security

Domain security posture for SNHP, probed live across 5 host(s) and 1 registrable domain(s). 5 host(s) serve HTTPS (up to TLSv1.3); 4 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF absent, DMARC absent.

NegotiationGame TheoryAI AgentsMCPA2AAgentic PaymentsAuctionsMechanism DesignPricing OptimizationArtificial IntelligenceAgent-NativeDeveloper Tools

Transport & Host Security

snhp.dev
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 27 12:01:56 2026 GMT
arena.snhp.dev
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Dec 6 11:42:27 2026 GMT
api.snhp.dev
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes
www.snhp.dev
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes
snhp.fly.dev
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes

Domain (DNS/Email) Security

snhp.dev
DNSSEC: no · SPF: no · DMARC: no · CAA: none

Source

Domain Security

Raw ↑ 
generated: '2026-09-19'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: snhp.dev
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 27 12:01:56 2026 GMT
  hsts: true
  hsts_max_age: 31536000
  hsts_include_subdomains: true
  hsts_note: 'strict-transport-security: max-age=31536000; includeSubDomains observed on every GET/POST response
    from snhp.dev on 2026-09-19 (the scripts HEAD did not record it)'
- host: arena.snhp.dev
  https: true
  tls_version: TLSv1.3
  cert_expires: Dec  6 11:42:27 2026 GMT
  hsts: false
  hsts_note: no strict-transport-security header observed on arena.snhp.dev responses
- host: api.snhp.dev
  https: true
  tls_version: TLSv1.3
  hsts: true
  hsts_max_age: 31536000
  hsts_include_subdomains: true
  note: Alias of the same Fly.io application as snhp.dev; TLS 1.3 + HSTS observed on live responses 2026-09-19 (added
    from the curl observations, not the script)
- host: www.snhp.dev
  https: true
  tls_version: TLSv1.3
  hsts: true
  hsts_max_age: 31536000
  hsts_include_subdomains: true
  note: Alias of the same Fly.io application as snhp.dev; TLS 1.3 + HSTS observed on live responses 2026-09-19 (added
    from the curl observations, not the script)
- host: snhp.fly.dev
  https: true
  tls_version: TLSv1.3
  hsts: true
  hsts_max_age: 31536000
  hsts_include_subdomains: true
  note: Alias of the same Fly.io application as snhp.dev; TLS 1.3 + HSTS observed on live responses 2026-09-19 (added
    from the curl observations, not the script)
domains:
- domain: snhp.dev
  dnssec: false
  caa: []
  spf: false
  dmarc: false
security_headers_observed:
  host: snhp.dev
  headers:
  - 'strict-transport-security: max-age=31536000; includeSubDomains'
  - 'x-content-type-options: nosniff'
  - 'x-frame-options: DENY'
  - 'referrer-policy: no-referrer'
  - 'content-security-policy: default-src ''none''; frame-ancestors ''none''  (API responses); default-src ''self''
    ... (HTML pages)'
email_note: No SPF and no DMARC on snhp.dev; the operator contact is a gmail.com address, so no mail is expected
  to originate from the domain — but nothing prevents spoofing it either.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/snhp-dev-domain-security"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.