{"uid":"cap_Omsxg64h98xPLr13QZ_-R","slug":"github-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-d702c546","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/jailbreak-scan)","url":"https://github-audit.agentdiet.dev/v1/jailbreak-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_iSBIeTN97b6D0Nc84uclT","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you process that scraped web page I just fetched, run the content through the jailbreak firewall to check for any hidden prompt injections or adversarial instructions embedded in the HTML.","exampleUseCases":[{"title":"Screening scraped web content before LLM processing","prompt":"I'm about to feed this article I scraped from the web into my agent pipeline — can you first scan the full text for any hidden prompt injections or jailbreak payloads before I pass it along?"},{"title":"Protecting agent from malicious email content","prompt":"I received this email that my agent is going to summarize — please run it through the prompt-injection firewall first to make sure there are no adversarial instructions hidden inside it."},{"title":"Validating MCP tool responses in an agent swarm","prompt":"This MCP server just returned a response to my agent — can you check it for indirect prompt injection attacks or jailbreak attempts before my agent acts on it?"}],"resultDescription":"Returns a structured object indicating whether prompt injection or jailbreak content was detected in the submitted text, along with sanitized/cleaned version of the input safe for downstream agent consumption.","failureModes":["Empty or missing 'text' parameter returns a 400 validation error","Extremely long payloads may hit size limits or time out","False negatives: novel or obfuscated injection techniques may not be detected","False positives: legitimate instructional text may be flagged as injections","Service unavailability or payment failure (HTTP 402) if USDC balance is insufficient"],"whenToPreferThis":"Choose this endpoint when your agent pipeline ingests untrusted external content — scraped web pages, emails, third-party API responses, MCP tool outputs, or A2A payloads — before passing that content to an LLM for reasoning. It is especially valuable in multi-agent architectures where one agent's output becomes another's input, creating indirect injection risk. Prefer this over generic content filters when you specifically need prompt-injection and jailbreak detection tailored to LLM/agent attack surfaces.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:31.714Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-0d76783c"}