A2A Indirect Prompt-Injection & Jailbreak Firewall

Choose this endpoint when your AI agent pipeline ingests untrusted third-party content — scraped web pages, external emails, MCP tool responses, or A2A payloads — and you need to sanitize that content before passing it to an LLM or downstream agent. It is especially valuable in agentic workflows where indirect prompt injection is a realistic attack vector (e.g., tool-augmented agents reading arbitrary web content). Prefer this over generic content filters when the threat model is specifically prompt injection and jailbreak attempts targeting AI systems rather than spam, NSFW, or general toxicity.

• Empty or missing 'text' parameter returns a 400 validation error
• Extremely long text inputs may time out or be truncated
• Novel or obfuscated injection techniques may evade detection (false negatives)
• Non-English injection attempts may have lower detection accuracy
• Payment failure via x402 returns HTTP 402 and blocks the scan