📄️Run one check once, anonymously
Runs an `http` (GET), `ssl`, `dns` or `tcp` check once against a public target and returns the normalised result. Nothing is stored. Disabled (404) unless `SP_TOOLS_ENABLED=true` (system parameter `tools.enabled`). Every run goes through an egress guard that refuses private, loopback, link-local and reserved addresses, whatever `SP_EGRESS_ALLOW_PRIVATE` says, as well as the instance's own hosts. Limits: 10 runs a minute and 100 a day per client IP, 16 runs in flight server-wide, 10 s per run, 5 redirects for `http`. A result is cached 60 s per (type, target, options). Error codes: `INVALID_TARGET` (400), `TARGET_NOT_ALLOWED` (403), `RESOLVE_FAILED` (422), `RATE_LIMITED` (429), `SERVICE_BUSY` (503, with `Retry-After`), `TIMEOUT` (504).