{"uid":"cap_Q1wA2vXxdTHVY8W16GZBr","slug":"sentinel402-prompt-scanner-88b20458","name":"Sentinel402 Prompt Scanner","description":"Paid tools for AI agents over x402: a PII and secret guardrail that scans outbound payloads, live citable data (crypto, weather, GitHub, sports, FX), and an RCP/1 retrieval server backed by that live data.","url":"https://pii-guardrail.chronokey.workers.dev/v1/scan/prompt?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"text":{"type":"string","description":"Untrusted text to inspect (web page, tool output, email, user message). Mutually exclusive with payload. Max 32000 chars."},"rules":{"type":"array","items":{"type":"string"},"description":"Explicit rule ids (see GET /prompt-rules)."},"enable":{"type":"array","items":{"type":"string"}},"disable":{"type":"array","items":{"type":"string"}},"payload":{"description":"Any JSON to inspect instead of raw text (stringified, then scanned)."},"minSeverity":{"enum":["low","medium","high","critical"],"type":"string","description":"Only report findings at or above this severity."},"blockThreshold":{"type":"number","description":"Risk score (0-100) at which the verdict becomes block. Default 60."}}},"responseSchema":{"type":"json","example":{"ok":true,"risk":88,"x402":{"network":"eip155:8453","settled":true,"facilitator":"https://api.cdp.coinbase.com/platform/v2/x402","transaction":"0xabc123"},"cpuMs":0.4,"counts":{"low":0,"high":0,"medium":0,"critical":2},"engine":"sentinel402-prompt/1","decision":"block","findings":[{"rule":"PI_INSTRUCTION_OVERRIDE","count":1,"label":"Instruction-override attempt","samples":[{"end":56,"start":24,"excerpt":"ignore all previous instructions","confidence":0.95}],"severity":"critical","confidence":0.95},{"rule":"PI_SYSTEM_PROMPT_LEAK","count":1,"label":"System-prompt exfiltration attempt","samples":[{"end":84,"start":61,"excerpt":"reveal your system prompt","confidence":0.93}],"severity":"critical","confidence":0.93}],"truncated":false,"scannedChars":84,"engineVersion":"1.0.0"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_iGjAtarcY9xjq4tO9pX4T","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans untrusted text or JSON payloads for prompt injection attacks, PII, and secret leakage, returning a risk score and block/allow decision","exampleAgentPrompt":"Before passing this web page content to the next tool, scan it for prompt injection attempts or instruction-override tricks — flag anything critical or high severity and block it if the risk score is above 60.","exampleUseCases":[{"title":"Guard agent against prompt injection","prompt":"I just scraped this webpage to feed into my agent's context — can you run it through Sentinel402 first to check for any prompt injection or instruction-override attempts and block it if the risk score is above 60?"},{"title":"Screen outbound payload for PII","prompt":"Before my agent sends this JSON response to the user, scan it for any PII or secret leakage — only flag medium severity or higher and block it if anything critical shows up."},{"title":"Validate user message before LLM call","prompt":"This is a raw message from an untrusted user that I'm about to send to my LLM — can you check it for system-prompt exfiltration attempts or instruction overrides and tell me whether to block or allow it?"}],"resultDescription":"Returns a JSON object with: a boolean ok field, an integer risk score (0–100), a decision string ('block' or 'allow'), per-severity counts of findings, an array of finding objects (each with rule ID, label, severity, confidence, and text excerpts with character offsets), total scanned characters, engine version, and x402 payment settlement details.","failureModes":["Payment not settled via x402 — returns 402 Payment Required","Text exceeds 32,000 character limit — request rejected","Both text and payload provided simultaneously — mutually exclusive fields","Invalid rule ID in rules array — unknown rule error","Invalid minSeverity enum value — validation error","Network timeout on Cloudflare Worker — transient 5xx error"],"whenToPreferThis":"Choose this endpoint when you need a real-time, per-call prompt injection and PII guardrail for untrusted text entering or leaving an AI agent pipeline. It is purpose-built for LLM security use cases (instruction overrides, system prompt leaks, secret exfiltration) with confidence-scored findings and configurable block thresholds — making it preferable to generic content moderation APIs that lack prompt-injection–specific rules.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T00:38:59.422Z","isFirstParty":false,"canonicalSlug":"sentinel402-prompt-scanner-88b20458"}