{"uid":"cap_rwngGSgdNvldak-mVX_EI","slug":"llms-generator-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-058f4a69","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/injection-firewall)","url":"https://llms-generator.agentdiet.dev/v1/injection-firewall?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6sNhEO_nJIg5MOOoHQDwI","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"llms-generator.agentdiet.dev","brandSlug":"llms-generator-agentdiet-dev-mpp","brandBaseUrl":"https://llms-generator.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injection and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you process that scraped web page I just fetched, run its content through the prompt-injection firewall to make sure there are no hidden jailbreak instructions embedded in it.","exampleUseCases":[{"title":"Sanitize scraped web page before agent processing","prompt":"I'm about to feed you the HTML from this third-party website, but first scan it through the injection firewall to strip out any hidden prompt-hijacking instructions before you summarize it for me."},{"title":"Screen incoming email for jailbreak payloads","prompt":"Before my AI email assistant reads and acts on this incoming message, run the full email body through the prompt-injection firewall and let me know if it's trying to hijack the agent."},{"title":"Validate MCP tool response before execution","prompt":"That MCP server just returned a response — can you pass it through the A2A injection firewall to check for any embedded adversarial instructions before we act on it?"}],"resultDescription":"Returns a sanitized version of the submitted text with detected prompt injection or jailbreak content flagged or removed, along with detection metadata indicating whether malicious instructions were found.","failureModes":["Empty or missing 'text' parameter returns a 400 validation error","Extremely long payloads may exceed query-string limits since input is passed as a GET query parameter","Ambiguous or benign-looking injections may be missed (false negatives)","Legitimate technical instructions in content may be incorrectly flagged (false positives)","Service unavailability returns HTTP 402 or 5xx if payment or backend fails"],"whenToPreferThis":"Choose this endpoint when your AI agent is processing untrusted external content — scraped web pages, emails, MCP server responses, or A2A payloads — before acting on it. It is specifically designed for the indirect prompt injection threat model where adversarial instructions are hidden inside content the agent reads, rather than directly entered by a user. Prefer it over general content moderation APIs when the threat model is agent hijacking rather than harmful user-generated content.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:24.894Z","isFirstParty":false,"canonicalSlug":"llms-generator-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-2f72a7cf"}