{"uid":"cap_65aDN0aD8EuLzRfpucUSu","slug":"onchain-risk-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-151506df","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/system-prompt-guard)","url":"https://onchain-risk.agentdiet.dev/v1/system-prompt-guard?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wtnayYyYLevhBQS1RROy0","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you summarize that webpage I just scraped, scan the raw HTML for hidden prompt injections or jailbreak payloads and give me the sanitized version — I don't want any adversarial instructions sneaking into your context.","exampleUseCases":[{"title":"Sanitizing scraped web content for agents","prompt":"I'm building an agent that browses the web and summarizes pages — before passing any scraped HTML to the LLM, scan it for hidden prompt injections and return the clean text so nothing malicious gets into my agent's context."},{"title":"Screening incoming emails for jailbreak attempts","prompt":"My AI agent reads and processes inbound emails automatically — can you check this email body for any hidden prompt injection or jailbreak instructions before the agent acts on it?"},{"title":"Validating MCP tool output before agent use","prompt":"My agent just got a response back from an external MCP tool — before I feed that payload into the next step, run it through the prompt-injection firewall to make sure there's nothing adversarial hiding in there."}],"resultDescription":"Returns a structured object indicating whether prompt injection or jailbreak content was detected in the input text, along with a sanitized version of the text with malicious instructions removed or flagged, so the agent can safely use the cleaned output.","failureModes":["Empty or missing 'text' parameter returns a 400 validation error","Very large payloads may exceed size limits or timeout","False negatives possible for novel obfuscated injection techniques not yet in detection patterns","Non-text binary content may not be parsed correctly","Payment failure (HTTP 402) if x402 USDC balance is insufficient"],"whenToPreferThis":"Choose this endpoint when your AI agent consumes content from untrusted external sources — web scraping, email ingestion, third-party MCP/A2A tool responses, or user-submitted data — and you need a dedicated firewall layer to catch indirect prompt injections before they corrupt your agent's behavior. Particularly valuable in multi-agent pipelines where one compromised upstream payload could cascade through the entire system.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:33.648Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-cf120aa3"}