# Delx Path Safety Check

> Delx Path Safety Check is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Evaluates an untrusted file/URL path string for unsafe parent-segment signals (e.g. directory traversal) and returns a deterministic machine-readable JSON safety assessment.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/path-safety-check
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-path-safety-check-18cc9752
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Su2Oe2pm5PmGOCPdLjH50

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-path-safety-check-18cc9752 -d '<json body>'
```

Example prompt: Before we process this uploaded file, can you run a path safety check on the path string '/uploads/../../etc/passwd' to see if it contains any dangerous parent-segment traversal signals?

## When to prefer this

Use this endpoint when you need a lightweight, stateless, deterministic preflight check on an untrusted path string before allowing it to propagate through a data pipeline, file operation, or security-sensitive workflow. Prefer it over building custom regex logic when you want a machine-readable JSON result with no data retention. It is well-suited for enterprise agent workflows where path traversal detection is one bounded step among many.

## Known failure modes

- Missing or empty 'path' field returns an error response
- Malformed request body results in a 4xx error
- Payment not included or insufficient USDC via x402 returns a 402 Payment Required response
- Path strings that are extremely long may be rejected or truncated
- Results are advisory only — false negatives are possible for novel obfuscation patterns

## How this service works

Evaluate an untrusted path for unsafe parent-segment signals without returning secret data. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible…

## Output

Returns a deterministic machine-readable JSON object indicating whether the input path contains unsafe parent-segment signals (e.g. directory traversal sequences), along with advisory risk classifications. The response is stateless and does not retain the input path.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "path": {
   "type": "string",
   "description": "Input field: path."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "low",
  "schema": "delx/util-path-safety-check/v1",
  "advisory": "Heuristic only; use parameterization, contextual encoding, and allowlists.",
  "text_sha256": "873456cf6e41efa219c32b5b9c782135f2d5a425db8d703eaccc783982e0fa7b",
  "signal_count": 0,
  "values_returned": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-path-safety-check-18cc9752/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)