# A2A Indirect Prompt-Injection & Jailbreak Firewall

> A2A Indirect Prompt-Injection & Jailbreak Firewall is a paid API for AI agents from serp-extract.agentdiet.dev, paid per call via MPP, $0.005/call, status unknown (last checked 2026-10-23).

Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.

## Facts

- Endpoint: POST https://serp-extract.agentdiet.dev/v1/workflows/rag-context-sanitizer?utm_source=zero.xyz
- Price: $0.005/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-23
- Activations on Zero: 0
- Provider: serp-extract.agentdiet.dev
- Website: https://serp-extract.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/serp-extract-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-f3e6d179
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DVasYBK3jcBnIe58Oz3sB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability serp-extract-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-f3e6d179 -d '<json body>'
```

Example prompt: Before you use this scraped webpage content in your answer, run it through the prompt-injection firewall to check for any hidden instructions or jailbreak attempts embedded in the text: '<scraped content here>'.

## When to prefer this

Choose this endpoint when your AI agent or RAG pipeline consumes untrusted external content — scraped web pages, inbound emails, third-party API responses, MCP tool outputs, or A2A messages — and you need a dedicated security layer to detect and neutralize indirect prompt injections and jailbreak payloads before they reach your model. It is especially valuable in autonomous agent workflows where the attack surface from external data sources is large and human review is impractical.

## Known failure modes

- Empty or whitespace-only text input returns a validation error
- Extremely large payloads may exceed processing limits
- Novel or obfuscated injection techniques may evade detection
- Non-text binary content may not be parseable
- x402 payment failure if USDC balance is insufficient

## How this service works

Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/workflows/rag-context-sanitizer)

## Output

Returns a sanitized version of the submitted text with hidden prompt injection payloads and jailbreak instructions removed or flagged, enabling safe downstream use in LLM pipelines, RAG systems, or agent workflows.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "text"
 ],
 "properties": {
  "text": {
   "type": "string",
   "minLength": 1,
   "description": "Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/serp-extract-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-f3e6d179/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from serp-extract.agentdiet.dev](https://www.zero.xyz/host/serp-extract.agentdiet.dev/llms.txt)