{"uid":"cap_UQV9B7q0p_WU0rz7K0MY_","slug":"sentinel402-pii-secrets-compliance-audit-7afafd85","name":"Sentinel402 PII & Secrets Compliance Audit","description":"Paid tools for AI agents over x402: a PII and secret guardrail that scans outbound payloads, live citable data (crypto, weather, GitHub, sports, FX), and an RCP/1 retrieval server backed by that live data.","url":"https://pii-guardrail.chronokey.workers.dev/v1/audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"text":{"type":"string","description":"Text to audit. Mutually exclusive with payload. Max 32000 chars."},"payload":{"description":"Any JSON to audit instead of raw text."},"frameworks":{"type":"array","items":{"enum":["pci-dss","gdpr","hipaa","secrets"],"type":"string"},"description":"Restrict the report (default: all four)."}}},"responseSchema":{"type":"json","example":{"ok":true,"risk":100,"x402":{"network":"eip155:8453","settled":true,"facilitator":"https://facilitator.payai.network","transaction":"0xdef456"},"audit":"sentinel402-compliance-audit/1","overall":"fail","summary":"FAIL — 3/4 framework profile(s) triggered (pci-dss, gdpr, hipaa, secrets); worst severity critical. Do not forward this payload as-is; use the sanitized copy.","sanitized":"Patient [SSN:#f1a2b3] paid with card [CREDIT_CARD:************4242]; aws key [AWS_ACCESS_KEY:#c4d5e6].","truncated":false,"frameworks":[{"id":"pci-dss","name":"PCI DSS 4.x (card data)","verdict":"fail","triggered":[{"rule":"CREDIT_CARD","count":1,"label":"Credit / debit card number (PAN)","severity":"critical"}],"findingsCount":1},{"id":"gdpr","name":"GDPR / UK GDPR (personal data)","verdict":"fail","triggered":[{"rule":"SSN","count":1,"label":"US Social Security number","severity":"critical"}],"findingsCount":1},{"id":"hipaa","name":"HIPAA Safe Harbor (US health data)","verdict":"fail","triggered":[{"rule":"SSN","count":1,"label":"US Social Security number","severity":"critical"}],"findingsCount":1},{"id":"secrets","name":"Secrets hygiene (SOC 2 CC6-style)","verdict":"fail","triggered":[{"rule":"AWS_ACCESS_KEY","count":1,"label":"AWS access key id","severity":"critical"}],"findingsCount":1}],"scannedChars":97,"engineVersion":"1.1.0","otherFindings":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_C9SaAHqp1OVmL1gR6XS1z","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans text or JSON payloads for PII and secrets against PCI-DSS, GDPR, HIPAA, and secrets hygiene frameworks, returning a risk score, per-framework verdicts, and a redacted sanitized copy.","exampleAgentPrompt":"Before you send that user record to the third-party analytics service, scan it for PII and secrets — check it against PCI-DSS, GDPR, HIPAA, and secrets hygiene — and give me the redacted version if anything triggers.","exampleUseCases":[{"title":"Pre-send outbound webhook guardrail","prompt":"I'm about to POST this JSON object to our partner's webhook endpoint — can you scan it for any credit card numbers, SSNs, or AWS keys first, and show me a sanitized version I can safely send?"},{"title":"LLM output compliance check","prompt":"Before my agent forwards the customer support summary to our CRM, audit the text for GDPR and HIPAA violations — I need to know the risk score and whether it's safe to send as-is."},{"title":"Log sanitization before storage","prompt":"We're about to write this application log blob to S3 — can you run it through a secrets and PCI-DSS scan to make sure there are no credentials or card numbers hiding in it, and give me a redacted copy?"}],"resultDescription":"Returns a JSON object with: overall pass/fail verdict, a 0–100 risk score, a human-readable summary, a sanitized copy with sensitive values replaced by labeled tokens, and a per-framework breakdown (pci-dss, gdpr, hipaa, secrets) listing each triggered rule, its count, label, and severity (critical/high/medium/low). Also includes engine version, character count, and x402 payment settlement metadata.","failureModes":["Text exceeds 32,000 character limit — request rejected","Both 'text' and 'payload' provided simultaneously — mutually exclusive fields","Invalid framework enum value — request rejected with validation error","Payment via x402 not settled — endpoint returns 402 Payment Required","Malformed JSON in payload field — parse error returned","Network timeout from Cloudflare Worker — transient 5xx error"],"whenToPreferThis":"Choose this endpoint when you need a multi-framework compliance audit (PCI-DSS, GDPR, HIPAA, and secrets) in a single call with a sanitized output ready to forward. It is specifically designed for AI agent pipelines that need a guardrail before sending data to external services, logging systems, or third-party APIs. Prefer it over generic regex-based scrubbers when you need structured per-framework verdicts and severity ratings, or when you need a redacted payload rather than just a detection report.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T00:37:06.142Z","isFirstParty":false,"canonicalSlug":"sentinel402-pii-secrets-compliance-audit-7afafd85"}