{"uid":"cap_JoCMJH24ix_TgIp2QimyN","slug":"preflight-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-845ca999","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/workflows/rag-context-sanitizer)","url":"https://preflight.agentdiet.dev/v1/workflows/rag-context-sanitizer?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_OL2rh9hLkmoUPbJf-gtnP","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized text.","exampleAgentPrompt":"Before you summarize that scraped web page, run the raw HTML through the prompt-injection firewall first and give me the sanitized version — I don't want hidden instructions hijacking you.","exampleUseCases":[{"title":"Sanitize RAG chunks before LLM ingestion","prompt":"I'm building a RAG pipeline that pulls in web pages and I'm worried about adversarial content. Can you scan this chunk of web text for hidden prompt injections and give me the clean version I can safely feed to the model?"},{"title":"Screen inbound email for jailbreak payloads","prompt":"Before my agent processes this email that was forwarded from an unknown sender, check whether it contains any hidden prompt injection or jailbreak instructions embedded in the body."},{"title":"Validate MCP tool response before agent continues","prompt":"My agent just got a response back from an external MCP tool and I want to make sure it hasn't been tampered with — can you run it through the prompt-injection firewall and tell me if anything suspicious was found before we proceed?"}],"resultDescription":"Returns a sanitized version of the input text with any detected prompt injection or jailbreak payloads removed or flagged, along with metadata indicating whether threats were found and what was cleaned.","failureModes":["Empty or missing 'text' field returns a 400 validation error","Extremely large payloads may exceed processing limits or time out","False negatives are possible — novel or obfuscated injection techniques may not be detected","Payment not settled (HTTP 402) blocks execution if USDC micropayment via x402 is required","Non-text binary content (e.g., raw images) is not meaningful input and may yield empty sanitization"],"whenToPreferThis":"Choose this endpoint when your agent pipeline ingests untrusted external content — scraped HTML, emails, MCP/A2A tool responses, or RAG chunks — and you need an automated firewall layer to strip hidden prompt injections before the content reaches your LLM. Prefer this over manual filtering or regex-based approaches when the attack surface includes sophisticated jailbreak payloads or white-text/invisible injection techniques. Particularly valuable for multi-agent systems where one agent's output is consumed by another.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:32:58.318Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-5b5b7e27"}