Cloudmersive

Cloudmersive Content Threat Detection API

Content Threat Detection operations of the Cloudmersive Security Threat Detection API — 5 operation(s) served from https://api.cloudmersive.com and authenticated with the Apikey header. One Cloudmersive API key grants access to every API in the portfolio.

GitHub OpenAPI

Operations 5

POST /security/threat-detection/content/automatic/detect/string Automatically detect threats in an input string #
POST /security/threat-detection/content/insecure-deserialization/json/detect/string Detect Insecure Deserialization JSON (JID) attacks in a string #
POST /security/threat-detection/content/sql-injection/detect/string Check text input for SQL Injection (SQLI) attacks #
POST /security/threat-detection/content/xss/detect/string Protect text input from Cross-Site-Scripting (XSS) attacks through normalization #
POST /security/threat-detection/content/xxe/detect/xml/string Protect text input from XML External Entity (XXE) attacks #

Documentation

📖
Documentation
https://api.cloudmersive.com/docs/security.asp
📖
APIReference
https://api-console.cloudmersive.com/swagger/index.html?urls.primaryName=Security%20API

Specifications

⚙
OpenAPI
https://artifacts.apis.io/cloudmersive/openapi/cloudmersive-contentthreatdetection-api-openapi.yml
⚙
OpenAPI
https://api.cloudmersive.com/security/docs/v1/swagger

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/cloudmersive/json-schema/cloudmersive-string-automatic-threat-detection-schema.json
📊
JSONSchema
https://artifacts.apis.io/cloudmersive/json-schema/cloudmersive-string-xss-protection-result-schema.json
📊
JSONSchema
https://artifacts.apis.io/cloudmersive/json-schema/cloudmersive-string-insecure-deserialization-json-detection-schema.json
📊
JSONSchema
https://artifacts.apis.io/cloudmersive/json-schema/cloudmersive-string-sql-injection-detection-result-schema.json
📊
JSONSchema
https://artifacts.apis.io/cloudmersive/json-schema/cloudmersive-string-xxe-detection-result-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cloudmersive:cloudmersive-contentthreatdetection-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudmersive-contentthreatdetection-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: v1
  title: securityapi Content Threat Detection API
  description: The security APIs help you detect and block security threats.
servers:
- url: http://localhost
tags:
- name: ContentThreatDetection
paths:
  /security/threat-detection/content/automatic/detect/string:
    post:
      tags:
      - ContentThreatDetection
      summary: Automatically detect threats in an input string
      description: Auto-detects a wide range of threat types in input string, including Cross-Site Scripting (XSS), SQL Injection (SQLI), XML External Entitites (XXE), Server-side Request Forgeries (SSRF), and JSON Insecure Deserialization (JID).
      operationId: ContentThreatDetection_AutomaticThreatDetectionString
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringAutomaticThreatDetection'
            text/json:
              schema:
                $ref: '#/components/schemas/StringAutomaticThreatDetection'
            application/xml:
              schema:
                $ref: '#/components/schemas/StringAutomaticThreatDetection'
            text/xml:
              schema:
                $ref: '#/components/schemas/StringAutomaticThreatDetection'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /security/threat-detection/content/insecure-deserialization/json/detect/string:
    post:
      tags:
      - ContentThreatDetection
      summary: Detect Insecure Deserialization JSON (JID) attacks in a string
      description: Detects Insecure Deserialization JSON (JID) attacks from text input.
      operationId: ContentThreatDetection_DetectInsecureDeserializationJsonString
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringInsecureDeserializationJsonDetection'
            text/json:
              schema:
                $ref: '#/components/schemas/StringInsecureDeserializationJsonDetection'
            application/xml:
              schema:
                $ref: '#/components/schemas/StringInsecureDeserializationJsonDetection'
            text/xml:
              schema:
                $ref: '#/components/schemas/StringInsecureDeserializationJsonDetection'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /security/threat-detection/content/sql-injection/detect/string:
    post:
      tags:
      - ContentThreatDetection
      summary: Check text input for SQL Injection (SQLI) attacks
      description: Detects SQL Injection (SQLI) attacks from text input.
      operationId: ContentThreatDetection_CheckSqlInjectionString
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringSqlInjectionDetectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/StringSqlInjectionDetectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/StringSqlInjectionDetectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/StringSqlInjectionDetectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /security/threat-detection/content/xss/detect/string:
    post:
      tags:
      - ContentThreatDetection
      summary: Protect text input from Cross-Site-Scripting (XSS) attacks through normalization
      description: Detects and removes XSS (Cross-Site-Scripting) attacks from text input through normalization. Returns the normalized result, as well as information on whether the original input contained an XSS risk.
      operationId: ContentThreatDetection_ProtectXss
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringXssProtectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/StringXssProtectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/StringXssProtectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/StringXssProtectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /security/threat-detection/content/xxe/detect/xml/string:
    post:
      tags:
      - ContentThreatDetection
      summary: Protect text input from XML External Entity (XXE) attacks
      description: Detects XXE (XML External Entity) attacks from XML text input.
      operationId: ContentThreatDetection_CheckXxe
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringXxeDetectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/StringXxeDetectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/StringXxeDetectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/StringXxeDetectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
components:
  schemas:
    StringXssProtectionResult:
      description: Result of performing an XSS protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedXss:
          description: True if the input contained XSS scripting, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
        NormalizedResult:
          description: Normalized string result, with XSS removed
          type: string
    StringSqlInjectionDetectionResult:
      description: Result of performing an SQL Injection protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedSqlInjectionAttack:
          description: True if the input contained SQL Injection attacks, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
    StringAutomaticThreatDetection:
      description: Result of performing an Insecure Deserialization JSON protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        CleanResult:
          type: boolean
        ContainedJsonInsecureDeserializationAttack:
          description: True if the input contained Insecure Deserialization JSON, false otherwise
          type: boolean
        ContainedXssThreat:
          description: True if the input contained XSS attack, false otherwise
          type: boolean
        ContainedXxeThreat:
          description: True if the input contained XXE attack, false otherwise
          type: boolean
        ContainedSqlInjectionThreat:
          description: True if the input contained SQL Injection attack, false otherwise
          type: boolean
        ContainedSsrfThreat:
          description: True if the input contained an Server-Side Request Forgery (SSRF) URL attack, false otherwise
          type: boolean
        IsXML:
          description: True if the input string is XML, false otherwise
          type: boolean
        IsJSON:
          description: True if the input string is JSON, false otherwise
          type: boolean
        IsURL:
          description: True if the input string is a URL, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
    StringInsecureDeserializationJsonDetection:
      description: Result of performing an Insecure Deserialization JSON protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedJsonInsecureDeserializationAttack:
          description: True if the input contained Insecure Deserialization JSON, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
    StringXxeDetectionResult:
      description: Result of performing an XXE threat detection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedXxe:
          description: True if the input contained XXE threats, false otherwise
          type: boolean
  securitySchemes:
    Apikey:
      type: apiKey
      description: API Key Authentication
      name: Apikey
      in: header
x-provenance:
  method: harvested
  publisher: Cloudmersive
  source: https://api.cloudmersive.com/security/docs/v1/swagger
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)