{"openapi":"3.1.0","info":{"title":"InjectScan","version":"0.1.4","contact":{"name":"InjectScan","email":"hello@youraitools.co","url":"https://youraitools.co/guides/prompt-injection-scanner-api"},"license":{"name":"MIT"},"x-service-name":"InjectScan by AgentGate","x-category":"security","x-categories":["security"],"x-tags":["security","prompt-injection","jailbreak","guardrails","ai-agents"],"x-logo":{"url":"https://agentgate-source.pages.dev/icons/injectscan.png"},"description":"Prompt-injection scanner for AI agents: score text, web pages and MCP tool definitions before your agent reads them. Deterministic rules (instruction override, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijack, hidden Unicode, encoded payloads); risk score, categories and spans.","x-guidance":"GET /v1/scan?text=<text> or ?url=<page>, or POST /v1/scan with {\"text\"}, {\"url\"} or {\"tools\":[...]} (MCP tool definitions). $0.003 USDC on Base via x402, charged only on HTTP 200. Free preview for text up to 2,000 characters: /v1/scan/preview."},"servers":[{"url":"https://api.youraitools.co/injectscan"}],"externalDocs":{"description":"Integration guide","url":"https://youraitools.co/guides/prompt-injection-scanner-api"},"paths":{"/v1/scan":{"get":{"operationId":"scan","summary":"Scan text or a URL for prompt injection","tags":["paid"],"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.003"},"protocols":[{"x402":{}}]},"x-x402":{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F","amount":"3000","assetSymbol":"USDC","x402Versions":[2,1]},"parameters":[{"name":"text","in":"query","schema":{"type":"string"},"description":"Text to scan","example":"Please summarize this article about solar panels."},{"name":"url","in":"query","schema":{"type":"string","format":"uri"},"description":"Public http(s) page to fetch and scan (visible + hidden HTML)"}],"responses":{"200":{"description":"Scan result (payment settled)","content":{"application/json":{"schema":{"type":"object","properties":{"input":{"type":"string","enum":["text","url","tools"]},"risk_score":{"type":"integer","minimum":0,"maximum":100},"verdict":{"type":"string","enum":["safe","suspicious","malicious"]},"flagged":{"type":"boolean"},"categories":{"type":"array","items":{"type":"object","properties":{"category":{"type":"string"},"score":{"type":"integer"},"rules":{"type":"integer"},"description":{"type":"string"}}}},"findings":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"category":{"type":"string"},"weight":{"type":"number"},"start":{"type":"integer"},"end":{"type":"integer"},"location":{"type":"string"},"text":{"type":"string"}}}},"hidden":{"type":"object"},"decoded":{"type":"array"},"chars_scanned":{"type":"integer"},"truncated":{"type":"boolean"},"ruleset":{"type":"string"},"tools":{"type":"array","description":"tools= mode: one result per tool"},"hidden_html":{"type":"object","description":"url= mode: hidden HTML segments checked and flagged"}}},"example":{"input":"text","risk_score":0,"verdict":"safe","flagged":false,"categories":[],"findings":[],"hidden":{"zero_width":0,"bom_soft_hyphen":0,"bidi_controls":0,"unicode_tags":0,"homoglyph_words":0},"decoded":[],"chars_scanned":49,"truncated":false,"ruleset":"2026.10.1","ms":1}}}},"400":{"description":"Invalid input (never charged)"},"402":{"description":"Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)"},"403":{"description":"url= blocked by robots.txt (never charged)"},"502":{"description":"url= fetch failed (never charged)"}}},"post":{"operationId":"scan_post","summary":"Scan text, a URL, or MCP tool definitions","tags":["paid"],"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.003"},"protocols":[{"x402":{}}]},"x-x402":{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F","amount":"3000","assetSymbol":"USDC","x402Versions":[2,1]},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"text":{"type":"string","maxLength":100000},"url":{"type":"string","format":"uri"},"tools":{"type":"array","maxItems":100,"items":{"type":"object"}}},"oneOf":[{"required":["text"]},{"required":["url"]},{"required":["tools"]}]},"example":{"text":"Please summarize this article about solar panels."}}}},"responses":{"200":{"description":"Scan result (payment settled)","content":{"application/json":{"schema":{"type":"object","properties":{"input":{"type":"string","enum":["text","url","tools"]},"risk_score":{"type":"integer","minimum":0,"maximum":100},"verdict":{"type":"string","enum":["safe","suspicious","malicious"]},"flagged":{"type":"boolean"},"categories":{"type":"array","items":{"type":"object","properties":{"category":{"type":"string"},"score":{"type":"integer"},"rules":{"type":"integer"},"description":{"type":"string"}}}},"findings":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"category":{"type":"string"},"weight":{"type":"number"},"start":{"type":"integer"},"end":{"type":"integer"},"location":{"type":"string"},"text":{"type":"string"}}}},"hidden":{"type":"object"},"decoded":{"type":"array"},"chars_scanned":{"type":"integer"},"truncated":{"type":"boolean"},"ruleset":{"type":"string"},"tools":{"type":"array","description":"tools= mode: one result per tool"},"hidden_html":{"type":"object","description":"url= mode: hidden HTML segments checked and flagged"}}},"example":{"input":"text","risk_score":0,"verdict":"safe","flagged":false,"categories":[],"findings":[],"hidden":{"zero_width":0,"bom_soft_hyphen":0,"bidi_controls":0,"unicode_tags":0,"homoglyph_words":0},"decoded":[],"chars_scanned":49,"truncated":false,"ruleset":"2026.10.1","ms":1}}}},"400":{"description":"Invalid input (never charged)"},"402":{"description":"Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)"},"403":{"description":"url= blocked by robots.txt (never charged)"},"502":{"description":"url= fetch failed (never charged)"}}}},"/v1/scan/preview":{"get":{"operationId":"scan_preview","summary":"Free scan for text up to 2,000 characters (10/min/IP)","security":[],"responses":{"200":{"description":"OK"}},"parameters":[{"name":"text","in":"query","required":true,"schema":{"type":"string","maxLength":2000}}]},"post":{"operationId":"scan_preview_post","summary":"Free scan (POST {\"text\"})","security":[],"responses":{"200":{"description":"OK"}}}}}}