# Delx SQL Injection Scan

> Delx SQL Injection Scan is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Scans untrusted text for SQL injection attack signals and returns a deterministic machine-readable JSON result

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/sql-injection-scan
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-sql-injection-scan-2a13998d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__3bTnKsdpuox_ggmgp-MK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-sql-injection-scan-2a13998d -d '<json body>'
```

Example prompt: Before we pass this user-submitted form value to the database query, scan it for SQL injection signals: "1' OR '1'='1'; DROP TABLE users;--"

## When to prefer this

Choose this endpoint when you need a fast, stateless, privacy-safe preflight scan for SQL injection signals on untrusted text before it reaches a production database, query engine, or downstream integration. It is ideal for enterprise agent workflows where you want deterministic machine-readable output, no data retention, and a low per-call cost. Prefer it over general-purpose LLM-based security checks when you need consistent, reproducible results with no risk of input echoing or storage.

## Known failure modes

- Empty or missing text field returns validation error
- Text exceeding input size limits may be rejected
- Results are advisory only — the service does not guarantee all injection variants are caught
- Payment failure via x402 returns 402 status with no scan result
- Network timeout returns no result; retry is safe as endpoint is stateless and idempotent

## How this service works

Screen untrusted text for common SQL-injection signals without echoing it. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…

## Output

A deterministic machine-readable JSON object indicating whether SQL injection signals were detected in the submitted text, along with advisory classification details. No input data is retained or echoed back. Results are advisory and the caller retains responsibility for authorization decisions.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "Input field: text."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "high",
  "schema": "delx/util-sql-injection-scan/v1",
  "advisory": "Heuristic only; use parameterization, contextual encoding, and allowlists.",
  "text_sha256": "ca73936c7f13f709163098de9eeba474c05ba16cc18a4c7212b839ba3ea78a18",
  "signal_count": 2,
  "values_returned": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-sql-injection-scan-2a13998d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)