---
name: csp-builder
description: "CSP Builder (CSP Builder) via devops.majbase.com's free public API, no key required. Keywords: content security policy generator, build csp header."
---

# CSP Builder

CSP Builder. Calls devops.majbase.com's free public API — no API key or authentication required.

## Endpoint

```
POST https://devops.majbase.com/csp-builder/api
```

## Request / Response

```
API: POST /csp-builder/api
  action=build|parse                (required)
  directives=<JSON object>            (build only — {"script-src": "self example.com", ...})
  boolean_flags=<JSON object>          (build only — {"upgrade-insecure-requests": true})
  report_uri=<string>                  (build only, optional)
  policy=<string>                      (parse only — an existing CSP header value)
Build returns {"result": "..."}. Parse returns {"directives": {...}}.
```

## Example

```bash
curl -sS -X POST https://devops.majbase.com/csp-builder/api -H "Content-Type: application/json" -d '{"action":"build","directives":{"default-src":"'"'"'self'"'"'","script-src":"'"'"'self'"'"' https://cdn.example.com"}}'
curl -sS -X POST https://devops.majbase.com/csp-builder/api -H "Content-Type: application/json" -d '{"action":"parse","policy":"default-src '"'"'self'"'"'; script-src '"'"'self'"'"' https://cdn.example.com"}'
```

## Notes

- No API key or authentication required.
- Full interactive tool: https://devops.majbase.com/csp-builder/