{"uid":"cap_J9ON_euRh7mC0Qppx58YO","slug":"canaryguard-402-prompt-injection-firewall-25b96242","name":"CanaryGuard 402 Prompt Injection Firewall","description":"Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion.","url":"https://canaryguard-402.onrender.com/v1/sanitize?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["content"],"properties":{"content":{"type":"string","description":"Untrusted text or web content to sanitize"},"strict_mode":{"type":"boolean","default":true}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"status":"clean","inspection":{"method":"deterministic-rules","limitations":["Does not detect every obfuscated, multilingual, or novel instruction attack.","Does not fetch external stylesheets, render browser layout, or analyze linked resources.","Address scores reflect text context and do not verify ownership, reputation, or contract safety.","Treat sanitized content as untrusted data; keep agent instructions and wallet authorization separate."],"guaranteed_safe":false,"risk_score_semantics":"heuristic severity, not a probability"},"risk_score":0.01,"safety_receipt":"canary-v1-verified","crypto_addresses":[],"sanitized_content":"Example external text","injection_detected":false,"threats_neutralized":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_boLIWHmJ9_ukake2Ctfte","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Sanitizes untrusted text input by detecting and blocking prompt-injection attacks and wallet-draining commands before they reach an AI agent's context","exampleAgentPrompt":"Before you process this user-submitted comment, run it through CanaryGuard to scrub any prompt-injection or wallet-draining commands — use strict mode and only proceed if it comes back clean.","exampleUseCases":[{"title":"Securing agent web-scraping pipeline","prompt":"I'm building an agent that scrapes web pages and feeds the content to an LLM — can you sanitize each chunk of scraped text with CanaryGuard in strict mode before it hits the model, so we don't accidentally ingest any injected instructions?"},{"title":"Filtering user chat messages for agent","prompt":"Before my AI customer-support agent reads this incoming user message, please run it through CanaryGuard to check for any prompt-injection attempts or commands trying to drain a crypto wallet."},{"title":"Validating third-party API response content","prompt":"This third-party API returned some text I need to pass into my agent's context — can you sanitize it with CanaryGuard first to make sure it doesn't contain any hidden instructions or honeypot traps?"}],"resultDescription":"Returns the sanitized version of the input text with any detected prompt-injection patterns, wallet-draining commands, and honeypot content removed or flagged, along with detection metadata indicating whether threats were found.","failureModes":["Input content exceeds 50,000 character limit — request rejected with validation error","Missing required 'content' field in body — returns schema validation error","Service unavailable on render.com free-tier cold start — transient 503 timeout","Content is ambiguous and strict_mode=true causes over-blocking of benign text","Network timeout if payload is near the maximum size limit"],"whenToPreferThis":"Choose CanaryGuard 402 when your AI agent pipeline ingests untrusted text from external sources — user messages, web scrapes, third-party APIs, or file uploads — and you need a deterministic, pre-ingestion firewall specifically tuned to catch prompt-injection patterns and crypto wallet-draining commands before they reach your LLM context. Prefer it over general content moderation APIs when the threat model is adversarial AI manipulation rather than harmful content categories.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T20:45:20.454Z","isFirstParty":false,"canonicalSlug":"canaryguard-402-prompt-injection-firewall-25b96242"}