{"uid":"cap_otJii3fqSy-8_PPx8x1t7","slug":"x402-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-c36e64c7","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/injection-firewall)","url":"https://x402-audit.agentdiet.dev/v1/injection-firewall?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pJ08O9fNUzdh8jKmbvjcU","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injection and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you process that scraped web page, run it through the prompt injection firewall first — check it for any hidden jailbreak instructions or adversarial text embedded in the HTML and give me the sanitized version.","exampleUseCases":[{"title":"Safe web scraping for agent pipelines","prompt":"I'm having my agent read and summarize news articles from external sites — can you scan each page's text through the injection firewall before the agent processes it, so we catch any hidden prompt injections embedded in the HTML?"},{"title":"Screening inbound emails before LLM triage","prompt":"My AI email assistant is about to read and respond to this customer email — first, run the email body through the prompt injection scanner to make sure there are no jailbreak instructions hiding in it."},{"title":"Validating MCP tool responses before use","prompt":"My agent just got a response back from an external MCP tool — can you check that response payload for any hidden prompt injection or adversarial instructions before I let the agent act on it?"}],"resultDescription":"Returns a JSON object indicating whether a prompt injection or jailbreak payload was detected in the input text, along with a sanitized version of the text with any malicious instructions removed or flagged.","failureModes":["Empty or missing 'text' parameter returns a 400 validation error","Very large payloads may exceed input size limits and return an error","False negatives are possible if injections use novel obfuscation techniques","Rate limits or payment failures (x402) may result in 402 or 429 responses","Highly encoded or binary content may not be fully analyzed"],"whenToPreferThis":"Choose this endpoint when your AI agent pipeline ingests content from untrusted external sources — web pages, emails, third-party APIs, MCP tool responses, or A2A payloads — and you need to screen that content for hidden adversarial instructions before your LLM processes it. It is especially valuable in agentic workflows where indirect prompt injection is a real attack vector. Prefer this over generic content filters when you specifically need prompt-injection and jailbreak detection tuned for AI agent contexts.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:47.427Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-cd2da2c7"}