{"uid":"cap_YdzkxTBzpwwnHnqsJp4Af","slug":"agentdiet-tool-poisoning-shield-dee06f1a","name":"AgentDiet Tool Poisoning Shield","description":"Deterministic B2A/A2A/MCP/x402/MPP/L402 execution and intelligence node at https://rag-diet.agentdiet.dev settling in USDC on Base.","url":"https://rag-diet.agentdiet.dev/v1/tool-poisoning-shield?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","POST"],"type":"string"},"queryParams":{"type":"object","properties":{"text":{"type":"string"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"data":{},"status":"ok","roi_proof":{"compression_ratio_pct":91.4}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_68ctRGF-YDT6uYBA3iIXw","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans text for tool-poisoning attacks — malicious prompt injections or adversarial content embedded in tool outputs — and returns a safety verdict with compression metadata.","exampleAgentPrompt":"Before I pass this tool response into my context window, can you run it through the AgentDiet tool-poisoning shield to check if it contains any embedded malicious instructions or prompt injection attempts?","exampleUseCases":[{"title":"Web scraping pipeline safety check","prompt":"I'm building an agent that scrapes websites and feeds the content into GPT-4. Before each scraped page goes into the context window, scan it for tool poisoning or hidden prompt injections so my agent doesn't get hijacked."},{"title":"MCP tool output validation","prompt":"My agent just got a response from an MCP tool — can you run that response text through the tool-poisoning shield to make sure it doesn't contain adversarial instructions trying to override my agent's behavior?"},{"title":"RAG retrieval security gate","prompt":"I'm using a RAG pipeline that pulls from external documents. Check this retrieved chunk for any embedded prompt injection or tool-poisoning content before I inject it into my LLM's context."}],"resultDescription":"Returns a JSON object with a 'status' field ('ok' or error), a 'data' object containing the safety analysis results, and an 'roi_proof' object that includes a compression_ratio_pct value (e.g. 91.4%) indicating how much the content was processed or reduced. A status of 'ok' with data payload confirms whether the scanned text is clean or flagged as poisoned.","failureModes":["Missing or empty 'text' query parameter returns an error or empty analysis","Non-string input types may be rejected by schema validation","Network timeout if the text payload is excessively large","Payment failure (x402) if USDC balance on Base is insufficient — returns 402 Payment Required","Ambiguous or edge-case adversarial patterns may not be flagged with high confidence"],"whenToPreferThis":"Choose this endpoint when your agent pipeline ingests text from untrusted external sources — web scrapes, RAG retrievals, external API tool responses, or MCP outputs — and you need a lightweight, pay-per-call security gate that checks for embedded prompt injections or tool-poisoning attacks before that content reaches your LLM's context window. It is especially suited for A2A and agentic workflows using x402/L402 micropayment rails on Base.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-22T12:44:22.745Z","isFirstParty":false,"canonicalSlug":"agentdiet-tool-poisoning-shield-dee06f1a"}