{"uid":"cap_cczJ4EL6btT8zoRvxB7_c","slug":"sentinel402-pii-secret-guardrail-scan-for-pii-5e59b391","name":"Sentinel402 PII & Secret Guardrail (scan_for_pii)","description":"Paid tools for AI agents over x402: a PII and secret guardrail that scans outbound payloads, live citable data (crypto, weather, GitHub, sports, FX), and an RCP/1 retrieval server backed by that live data.","url":"https://pii-guardrail.chronokey.workers.dev/mcp?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","toolName","inputSchema"],"properties":{"body":{"type":"object","required":["jsonrpc","method","params"],"properties":{"id":{"type":["string","number","null"]},"method":{"type":"string","const":"tools/call"},"params":{"type":"object","required":["name"],"properties":{"name":{"type":"string","const":"scan_for_pii"},"_meta":{"type":"object","description":"Optional; an MPP payment credential rides at _meta[\"org.paymentauth/credential\"] and the receipt returns at result._meta[\"org.paymentauth/receipt\"]."},"arguments":{"type":"object","properties":{"mode":{"enum":["detect","redact","block"],"type":"string","description":"default detect"},"text":{"type":"string","description":"Text to scan"},"min_severity":{"enum":["low","medium","high","critical"],"type":"string"}}}}},"jsonrpc":{"type":"string","const":"2.0"}},"description":"JSON-RPC 2.0 request body that invokes the \"scan_for_pii\" MCP tool over streamable HTTP."},"type":{"type":"string","const":"mcp"},"example":{"type":"object"},"toolName":{"type":"string"},"transport":{"enum":["streamable-http"],"type":"string"},"description":{"type":"string"},"inputSchema":{"type":"object"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["decision","risk","findings"],"properties":{"risk":{"type":"number"},"decision":{"enum":["allow","redact","block"],"type":"string"},"findings":{"type":"array"},"sanitized":{"type":"string"}}}}}}},"responseSchema":{"type":"json","example":{"risk":100,"counts":{"low":0,"high":0,"medium":0,"critical":2},"decision":"redact","findings":[{"rule":"CREDIT_CARD","count":1,"samples":["[CREDIT_CARD:************4242]"],"severity":"critical","confidence":0.99},{"rule":"SSN_KEYWORD","count":1,"samples":["[SSN_KEYWORD:#ba9f03]"],"severity":"critical","confidence":0.98}],"sanitized":"card [CREDIT_CARD:************4242], [SSN_KEYWORD:#ba9f03]"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gC6NKB0jf5OS1F7Lm7Qha","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans outbound text payloads for PII and secrets, returning a risk score, categorized findings, and optionally redacted/sanitized output.","exampleAgentPrompt":"Before sending this response to the user, scan it for any PII or secrets — use redact mode so anything critical like credit card numbers or SSNs gets masked automatically: 'Your card ending in 4242 and SSN 123-45-6789 are on file.'","exampleUseCases":[{"title":"Guard LLM output before delivery","prompt":"Check this AI-generated response for any leaked PII or credentials before we send it to the customer — use redact mode so anything sensitive gets masked: 'Hi John, your billing card 4111-1111-1111-1111 has been charged.'"},{"title":"Compliance scan for logged payloads","prompt":"I need to scan this API request body for sensitive data before we write it to our logs — run it in block mode with a minimum severity of high so we stop anything critical: '{\"email\":\"jane@example.com\",\"ssn\":\"078-05-1120\",\"message\":\"please process my order\"}'"},{"title":"Agent safety guardrail in workflow","prompt":"My AI agent just composed an outbound webhook payload — can you scan it in detect mode to get a risk score and list of any PII findings before I decide whether to send it? Here's the text: 'Customer Alice Brown, DOB 1985-03-12, passport MX1234567.'"}],"resultDescription":"Returns a JSON object with a numeric risk score (0-100), a decision enum (allow/redact/block), a findings array with per-rule details including rule name, count, severity, confidence, and redacted samples, counts broken down by severity level, and optionally a sanitized string with PII tokens replaced.","failureModes":["Missing or invalid payment credential returns HTTP 402 with payment-required details","Text field absent or empty may return an error or trivial allow decision","Invalid mode or min_severity enum value causes validation error","Very large payloads may time out on the Cloudflare Worker edge","If the MCP JSON-RPC envelope is malformed (wrong method, missing jsonrpc field), returns JSON-RPC error response"],"whenToPreferThis":"Choose this endpoint when you need a pay-per-call, no-subscription PII and secret scanner that integrates directly into MCP-compatible agent pipelines via x402 micropayments. It is ideal for agent workflows that need an inline guardrail — scanning LLM outputs, API responses, or user-submitted text before forwarding — especially when you want severity-tiered findings with confidence scores and the option to auto-redact rather than just flag. Prefer it over static regex libraries when you need a managed, regularly updated ruleset without hosting infrastructure.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:30:15.144Z","isFirstParty":false,"canonicalSlug":"sentinel402-pii-secret-guardrail-scan-for-pii-5e59b391"}