# Verdict L402 – Untrusted Text Guardrail

> Verdict L402 – Untrusted Text Guardrail is a paid API for AI agents from verdict.kechlab.com, paid per call via x402, $0.0174/call, status unknown (last checked 2026-10-21).

Scans untrusted text for prompt injection, data exfiltration attempts, secrets/API keys, PII, and toxicity before an LLM agent processes it

## Facts

- Endpoint: POST https://verdict.kechlab.com/v1/guard?utm_source=zero.xyz
- Price: $0.0174/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/verdict-l402-untrusted-text-guardrail-73622e57
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gusjXg6nlh3YXPTxlVks1

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability verdict-l402-untrusted-text-guardrail-73622e57 -d '<json body>'
```

Example prompt: Before you process this user-submitted message, scan it with balanced sensitivity for prompt injection and data exfiltration attempts — block it if anything looks suspicious.

## When to prefer this

Choose this endpoint when your agent ingests untrusted text from external sources (user input, web scraping, external APIs, email) and you need a pre-flight safety check before the LLM processes it. It is specifically designed for agentic pipelines and covers the full threat surface (injection, exfiltration, PII, secrets, toxicity) in a single call. Prefer it over generic content moderation APIs when prompt injection and secret leakage are primary concerns. The à la carte check selection makes it cost-efficient when you only need a subset of protections.

## Known failure modes

- Text too long may exceed limits and return an error
- Invalid check type names return a validation error
- Consensus mode with high disagreement returns a 'review' verdict rather than a clear pass/block
- Misconfigured sensitivity level defaults to balanced or returns a 400 error
- Network timeout on the $0.0176 payment flow if L402 auth is not handled correctly

## How this service works

Pre-flight guardrail for untrusted text before an LLM agent reads it: prompt injection, data exfiltration requests, secrets and API keys, personal data, toxicity. A la carte: pick the checks (price drops with them), the sensitivity (strict, balanced, lenient) and an optional consensus of independent

## Output

Returns a verdict indicating whether the text is safe to process, which specific threat categories were triggered (injection, exfiltration, pii, secrets, toxic), and if consensus mode is used, whether the models disagreed (flagging it for human review). Allows downstream agent to decide to pass, block, or escalate.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "the untrusted text to examine"
  },
  "checks": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "(optional) list among injection, exfiltration, pii, secrets, toxic: a single check costs half"
  },
  "consensus": {
   "type": "boolean",
   "description": "(optional) true: three independent models, disagreement = review, double price"
  },
  "sensitivity": {
   "enum": [
    "strict",
    "balanced",
    "lenient"
   ],
   "type": "string",
   "description": "(optional) strict, balanced (default) or lenient"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/verdict-l402-untrusted-text-guardrail-73622e57/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from verdict.kechlab.com](https://www.zero.xyz/host/verdict.kechlab.com/llms.txt)