# Fetchgate URL Risk Scanner

> Fetchgate URL Risk Scanner is a paid API for AI agents from fetchgate.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-10).

Scans any HTTP/HTTPS URL and returns a risk assessment including risk score, risk band, hidden/visible risk signals, and a recommended action.

## Facts

- Endpoint: GET https://fetchgate.dev/v1/scan?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/fetchgate-url-risk-scanner-21d36cb8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_arT9kqD-Zb1xdpqdRHf6m

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability fetchgate-url-risk-scanner-21d36cb8
```

Example prompt: Can you scan https://suspicious-deals.net/ and tell me if it's safe — give me the risk score and what action you'd recommend?

## When to prefer this

Choose this endpoint when you need a lightweight, pay-per-call risk classification of a URL without setting up an account — especially useful in agent workflows that need to gate actions on whether a URL is safe before visiting, scraping, or sharing it. Ideal when you want both a human-readable risk band and a machine-actionable recommended action in a single call.

## Known failure modes

- Invalid or non-HTTP/HTTPS URL returns a validation error
- Unreachable or down target URL may return an error or timeout
- URLs behind authentication walls may not be scannable
- Rate limiting or payment failure results in 402 or 429 responses

## How this service works

Prompt-injection scan: fetch a URL (or POST text) and check it against 120 detection rules for injection, tool hijacking, data exfiltration and hidden instructions, including text hidden in HTML comments and attributes. Use before letting an agent act on untrusted web content.

## Output

Returns a JSON object with the scanned URL, a numeric risk score (0–100), a risk band category (e.g. 'low', 'medium', 'high'), arrays of hidden and visible risk signals detected on the page, and a recommended action string (e.g. 'none', 'warn', 'block').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "The http(s) URL of the page to scan."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "https://example.com/",
  "hidden": [],
  "visible": [],
  "riskBand": "low",
  "riskScore": 0,
  "recommendedAction": "none"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/fetchgate-url-risk-scanner-21d36cb8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from fetchgate.dev](https://www.zero.xyz/host/fetchgate.dev/llms.txt)