{"uid":"cap_WZo37woJzjdfeQWcwMQnL","slug":"extendivo-safe-fetch-secure-cf00c95e","name":"Extendivo Safe Fetch Secure","description":"Fetch a public URL with SSRF protection, clean extraction, and semantic prompt-injection analysis.","url":"https://api.extendivo.com/v1/safe-fetch-secure?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.015","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9bzduABM0P-5mi_KxPJBi","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches a public URL via POST/PUT/PATCH with SSRF protection, clean content extraction, and semantic prompt-injection detection","exampleAgentPrompt":"Can you safely fetch this external URL using a POST request with a JSON body containing the search parameters, and check it for any prompt injection attempts before I use the response in my pipeline?","exampleUseCases":[{"title":"Agent pipeline external API call","prompt":"I need to safely call this third-party API endpoint via POST with a JSON body — can you fetch it with SSRF protection and tell me if the response contains any prompt injection attempts before I pass it to my next agent step?"},{"title":"Secure form submission retrieval","prompt":"Fetch this public form endpoint using a POST with form-data body containing the user inputs, and make sure it's clean of any injection tricks and not pointing to an internal network address."},{"title":"Webhook response safety check","prompt":"My workflow needs to hit this public webhook URL with a POST and a JSON payload — can you do that safely, extract the returned content cleanly, and flag if there's anything that looks like a semantic prompt injection in the response?"}],"resultDescription":"Returns the fetched URL's extracted clean content along with SSRF protection status (confirming the URL was safe to access) and a semantic prompt-injection analysis indicating whether the response content contains any injection attempts that could hijack downstream agent behavior.","failureModes":["SSRF violation: target URL resolves to an internal/private IP range — request blocked","Prompt injection detected: response flagged as containing semantic injection content","Invalid method: only POST, PUT, PATCH are accepted — GET requests are rejected","Malformed body: body type does not match actual body content","Unreachable target: URL returns network error or timeout","Unsupported URL scheme: non-HTTP/HTTPS URLs rejected"],"whenToPreferThis":"Choose this endpoint when your agent needs to make outbound POST/PUT/PATCH requests to external URLs and you need both SSRF protection (preventing server-side request forgery to internal infrastructure) AND semantic prompt-injection analysis of the response — making it ideal for agentic pipelines where untrusted third-party content could be fed back into an LLM. Prefer this over a plain fetch when the fetched content will be consumed by an AI model, especially in multi-agent workflows where a malicious response could hijack agent behavior.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-03T18:36:49.175Z","isFirstParty":false,"canonicalSlug":"extendivo-safe-fetch-secure-cf00c95e"}