{"uid":"cap_FWNSD9_U-wByIDGk9cBSC","slug":"serp-extract-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-2f412dda","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/mcp-injection-firewall)","url":"https://serp-extract.agentdiet.dev/v1/mcp-injection-firewall?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9tUDdOOnZBS4e9TGROkPq","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injection and jailbreak attacks, returning sanitized output.","exampleAgentPrompt":"Before my agent processes this scraped webpage content, run it through the prompt-injection firewall to detect and strip any hidden jailbreak or indirect prompt-injection payloads: '<html>...untrusted page content...</html>'","exampleUseCases":[{"title":"Securing web scrape before LLM ingestion","prompt":"I just scraped this webpage to summarize it with my agent, but I want to make sure it doesn't contain any hidden prompt injections or jailbreak instructions — can you run it through the firewall first and give me the sanitized version?"},{"title":"Screening incoming A2A agent messages","prompt":"My agent just received this payload from an external A2A tool and I'm worried it might contain adversarial instructions trying to override my agent's behavior — please scan it for hidden prompt injections and return the safe version."},{"title":"Filtering email content for AI processing","prompt":"I'm piping customer emails into my LLM pipeline to generate replies, but I want to protect against anyone embedding malicious prompt-injection instructions in their emails — can you scan this email body and sanitize it before I feed it to the model?"}],"resultDescription":"Returns a JSON object containing the sanitized version of the input text with any detected prompt-injection or jailbreak payloads removed or flagged, along with detection metadata indicating whether an attack was found.","failureModes":["Empty or missing 'text' field returns a validation error","Extremely long inputs may timeout or be truncated","False negatives possible for novel or highly obfuscated injection techniques","Payment failure (HTTP 402) if x402 USDC balance is insufficient","Non-text binary content may not be correctly parsed"],"whenToPreferThis":"Choose this endpoint when your AI agent pipeline ingests untrusted external content — scraped web pages, user emails, third-party MCP/A2A tool responses, or any text that could contain adversarial prompt-injection payloads — and you need a dedicated firewall layer before passing content to your LLM. Prefer this over generic content filters when you specifically need injection-aware sanitization tailored to agent and MCP/A2A threat models.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:46.645Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-18902259"}