{"uid":"cap_Su2Oe2pm5PmGOCPdLjH50","slug":"delx-path-safety-check-18cc9752","name":"Delx Path Safety Check","description":"Evaluate an untrusted path for unsafe parent-segment signals without returning secret data. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible…","url":"https://api.delx.ai/api/v1/x402/path-safety-check","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"path":{"type":"string","description":"Input field: path."}}},"responseSchema":{"type":"json","example":{"risk":"low","schema":"delx/util-path-safety-check/v1","advisory":"Heuristic only; use parameterization, contextual encoding, and allowlists.","text_sha256":"873456cf6e41efa219c32b5b9c782135f2d5a425db8d703eaccc783982e0fa7b","signal_count":0,"values_returned":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kv7y7hrUokVdcGlogttvf","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Evaluates an untrusted file/URL path string for unsafe parent-segment signals (e.g. directory traversal) and returns a deterministic machine-readable JSON safety assessment.","exampleAgentPrompt":"Before we process this uploaded file, can you run a path safety check on the path string '/uploads/../../etc/passwd' to see if it contains any dangerous parent-segment traversal signals?","exampleUseCases":[{"title":"Preflight check before file read","prompt":"We're about to load a config file from a user-supplied path — can you check whether '../../../etc/shadow' is safe to use, or if it has directory traversal signals we should block?"},{"title":"Validate webhook-supplied path in pipeline","prompt":"Our integration pipeline just received the path '/data/reports/../../secrets/keys.json' from an external webhook — run a path safety check on it before we allow it to proceed to the next stage."},{"title":"Security audit of batch upload paths","prompt":"A user submitted the upload path '/media/images/../../../var/www/html/shell.php' — can you evaluate it for unsafe parent-segment signals so our agent can decide whether to reject the request?"}],"resultDescription":"Returns a deterministic machine-readable JSON object indicating whether the input path contains unsafe parent-segment signals (e.g. directory traversal sequences), along with advisory risk classifications. The response is stateless and does not retain the input path.","failureModes":["Missing or empty 'path' field returns an error response","Malformed request body results in a 4xx error","Payment not included or insufficient USDC via x402 returns a 402 Payment Required response","Path strings that are extremely long may be rejected or truncated","Results are advisory only — false negatives are possible for novel obfuscation patterns"],"whenToPreferThis":"Use this endpoint when you need a lightweight, stateless, deterministic preflight check on an untrusted path string before allowing it to propagate through a data pipeline, file operation, or security-sensitive workflow. Prefer it over building custom regex logic when you want a machine-readable JSON result with no data retention. It is well-suited for enterprise agent workflows where path traversal detection is one bounded step among many.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T19:02:17.551Z","isFirstParty":false}