{"uid":"cap_xceZUa8mVS8akcrSdgckf","slug":"preflight-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-b7b7e892","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/indirect-injection-guard)","url":"https://preflight.agentdiet.dev/v1/indirect-injection-guard?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_uwRO84MdWhbU34-CYlBG0","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you process this webpage I just scraped, run it through the prompt injection firewall to check for any hidden instructions or jailbreak attempts embedded in the text and give me the sanitized version.","exampleUseCases":[{"title":"Guarding agent against poisoned web results","prompt":"I'm building a research agent that scrapes web pages — can you scan this HTML I just fetched from an untrusted site for any hidden prompt injections before my LLM reads it?"},{"title":"Screening inbound emails for injection attacks","prompt":"Before my email-processing agent parses this incoming message, run it through the injection guard to make sure there's no hidden instruction trying to hijack the agent's behavior."},{"title":"Validating MCP tool output before chaining","prompt":"My agent just got a response back from an external MCP tool — can you check that response text for embedded jailbreak payloads or sneaky prompt injections before I pass it to the next step in my pipeline?"}],"resultDescription":"Returns an object containing the sanitized version of the input text with prompt injections removed or neutralized, along with detection signals indicating whether injection or jailbreak content was found and what was stripped or flagged.","failureModes":["Empty or missing 'text' field returns a 400 validation error","Extremely long payloads may be truncated or rejected","Novel obfuscation techniques may evade detection (false negatives)","Non-text binary content may not parse correctly","Service unavailable returns 503; retry with Idempotency-Key to avoid double-billing","Payment failure via x402 returns 402 and blocks execution"],"whenToPreferThis":"Choose this endpoint when your AI agent is consuming untrusted external content — scraped web pages, inbound emails, third-party API responses, MCP tool outputs, or A2A messages — and you need a dedicated firewall layer to detect and neutralize hidden prompt injections or jailbreak attempts before they reach your LLM. Prefer this over generic content filters when you specifically need protection against adversarial AI-targeting attacks rather than general spam or malware.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:30:11.449Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-5b5b7e27"}