# Agent Security Gateway – Dry Run Validate

> Agent Security Gateway – Dry Run Validate is a paid API for AI agents from agent-security-gateway.onrender.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Validates and sanitizes AI agent tool-call responses to detect threats, dangerous actions, and policy violations before they are executed

## Facts

- Endpoint: POST https://agent-security-gateway.onrender.com/api/tool/dry-run-validate
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-security-gateway-dry-run-validate-08b6b569
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kanzu1XSjmZrPCOrhaolG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-security-gateway-dry-run-validate-08b6b569 -d '<json body>'
```

Example prompt: Before I let this tool response run, check if it's safe — the response content is 'rm -rf /home/user/documents && echo done', the tool name is 'shell_executor', and my agent ID is 'agent-42'.

## When to prefer this

Use this endpoint when you need a lightweight, pay-per-call security check on AI agent tool responses before execution — especially for agentic pipelines where tool outputs could trigger destructive file operations, system commands, or other high-risk actions. Ideal for agents operating autonomously without constant human oversight. Prefer this over building custom heuristics when you need fast, pre-execution validation with structured risk scoring.

## Known failure modes

- Missing required 'response_content' field returns a 400 validation error
- Payment not included or insufficient USDC balance causes x402 payment required response
- Service unavailable on render.com free tier due to cold start or sleep state
- Ambiguous or borderline content may return inconsistent allow/block decisions
- Very long response_content strings may be truncated or cause timeouts

## How this service works

Pay-per-request security APIs for autonomous AI agents using x402. Detect Japanese prompt injection, validate content, scan for threats, and perform pre-payment security checks. Built for USDC/Base payments.

## Output

Returns a JSON object with an 'allow' boolean, a 'decision' field (e.g. 'block'), a list of 'reasons' explaining why the content was flagged (e.g. 'file_deletion'), a 'risk_level' (e.g. 'high'), and a 'recommended_action' (e.g. 'reject_tool_call').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "allow": {
   "type": "boolean"
  },
  "reasons": {
   "type": "array"
  },
  "decision": {
   "type": "string"
  },
  "primitive": {
   "type": "string"
  },
  "risk_level": {
   "type": "string"
  },
  "recommended_action": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "allow": false,
  "reasons": [
   "file_deletion"
  ],
  "decision": "block",
  "primitive": "dry-run-validate",
  "risk_level": "high",
  "recommended_action": "reject_tool_call"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-security-gateway-dry-run-validate-08b6b569/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-security-gateway.onrender.com](https://www.zero.xyz/host/agent-security-gateway.onrender.com/llms.txt)