{"uid":"cap_1NGI14tLisW5k8T9ELY3R","slug":"arxiv-digest-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-72849348","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/injection-firewall)","url":"https://arxiv-digest.agentdiet.dev/v1/injection-firewall?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_L92egDFgLxOapE5Q_6y6S","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you summarize that scraped webpage, run its content through the prompt-injection firewall to check for any hidden jailbreak instructions or adversarial text embedded in it.","exampleUseCases":[{"title":"Sanitizing web-scraped content for an agent","prompt":"I'm about to feed this raw HTML from a third-party website into my AI pipeline — can you first scan it for any hidden prompt injections or jailbreak payloads and give me back the clean version?"},{"title":"Screening inbound emails for adversarial instructions","prompt":"Before my agent processes this email I received, run the full email body through the prompt-injection firewall to make sure there are no embedded instructions trying to hijack my AI."},{"title":"Validating MCP tool response before use","prompt":"My agent just got back a response from an external MCP tool — can you check that response text for any indirect prompt injection attacks before I pass it along to the next step in my workflow?"}],"resultDescription":"Returns a sanitized version of the input text with detected prompt injection or jailbreak payloads identified and removed or flagged, along with metadata about what threats were found.","failureModes":["Empty or missing 'text' parameter returns a validation error","Extremely long payloads may be truncated or rejected","Novel or obfuscated injection techniques may evade detection","Non-text binary content may produce unexpected results","Rate limiting or payment failures (HTTP 402) if x402 payment is not provided"],"whenToPreferThis":"Choose this endpoint when your AI agent is about to process content from untrusted external sources — web pages, emails, third-party API responses, MCP tool outputs, or A2A payloads — and you need to screen for indirect prompt injection or jailbreak attempts before that content influences your LLM's behavior. It is particularly valuable in agentic pipelines where the agent autonomously fetches and acts on external data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:02.251Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-63370fac"}