{"uid":"cap_oiu60oVgmfBz8VPkBhi3f","slug":"token-intel-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-e2638b53","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/system-prompt-guard)","url":"https://token-intel.agentdiet.dev/v1/system-prompt-guard?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_MdRha58PXF2A5r_KGnptS","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injection and jailbreak attempts, returning sanitized text.","exampleAgentPrompt":"Before you summarize that scraped article, run it through the prompt injection firewall first — paste the raw HTML text in and tell me if any hidden instructions or jailbreak payloads were found, then give me the sanitized version.","exampleUseCases":[{"title":"Safe web scraping for AI pipeline","prompt":"I'm about to pass this scraped webpage content to our summarization agent — can you first scan it for any hidden prompt injections or jailbreak instructions embedded in the HTML and give me the sanitized text if it's clean?"},{"title":"Filtering MCP tool responses","prompt":"Before my agent acts on this MCP tool response, I need you to check it for indirect prompt injection attacks — scan the payload and tell me whether it's safe to process or if it contains adversarial instructions."},{"title":"Securing email-to-agent workflow","prompt":"We're feeding customer emails into our AI support agent — can you screen this email body for embedded jailbreak attempts or hidden prompt manipulation before it hits the model?"}],"resultDescription":"Returns a structured object indicating whether the input text contains prompt injection or jailbreak content, along with a sanitized version of the text with adversarial instructions removed or flagged.","failureModes":["Empty or missing 'text' parameter returns a 400 validation error","Extremely long text inputs may exceed query parameter length limits for GET requests","Ambiguous or benign-looking injections may produce false negatives","Overly aggressive filtering may sanitize legitimate instructional content (false positives)","HTTP 402 Payment Required if micropayment (x402/USDC) is not included or insufficient"],"whenToPreferThis":"Choose this endpoint when your AI agent pipeline ingests content from untrusted external sources — web pages, emails, third-party API responses, MCP tool outputs, or A2A agent payloads — and you need to prevent indirect prompt injection or jailbreak attacks before passing that content to an LLM. Prefer it over general-purpose content filters when the specific threat model is adversarial LLM manipulation rather than spam, toxicity, or policy violations.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:08.068Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-bee41bd8"}