YourAITools Inject Scan API

The InjectScan API from YourAITools — 2 operation(s) for injectscan.

GitHub OpenAPI

Operations 4

GET /injectscan/v1/scan Scan text or a URL for prompt injection #
POST /injectscan/v1/scan Scan text, a URL, or MCP tool definitions #
GET /injectscan/v1/scan/preview Free scan for text up to 2,000 characters (10/min/IP) #
POST /injectscan/v1/scan/preview Free scan (POST {"text"}) #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/youraitools-co:youraitools-co-injectscan-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

youraitools-co-injectscan-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: YourAITools Inject Scan API
  version: 1.0.0
  description: Pay-per-call tools for AI agents, paid per request in USDC via x402 on Base, Polygon, Arbitrum One or Solana, with each tool's own spec at https://api.youraitools.co//openapi.json.
  contact:
    email: hello@youraitools.co
    url: https://youraitools.co/built-by-us
servers:
- url: https://api.youraitools.co
tags:
- name: InjectScan
paths:
  /injectscan/v1/scan:
    get:
      operationId: scan
      summary: Scan text or a URL for prompt injection
      tags:
      - InjectScan
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.003'
        protocols:
        - x402: {}
      x-x402:
        scheme: exact
        network: eip155:8453
        asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
        payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        amount: '3000'
        assetSymbol: USDC
        x402Versions:
        - 2
        - 1
        networks:
        - network: eip155:8453
          name: Base
          asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: eip155:137
          name: Polygon
          asset: '0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: eip155:42161
          name: Arbitrum One
          asset: '0xaf88d065e77c8cC2239327C5EDb3A432268e5831'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
          name: Solana
          asset: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
          symbol: USDC
          payTo: FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte
      parameters:
      - name: text
        in: query
        schema:
          type: string
        description: Text to scan
        example: Please summarize this article about solar panels.
      - name: url
        in: query
        schema:
          type: string
          format: uri
        description: Public http(s) page to fetch and scan (visible + hidden HTML)
      responses:
        '200':
          description: Scan result (payment settled)
          content:
            application/json:
              schema:
                type: object
                properties:
                  input:
                    type: string
                    enum:
                    - text
                    - url
                    - tools
                  risk_score:
                    type: integer
                    minimum: 0
                    maximum: 100
                  verdict:
                    type: string
                    enum:
                    - safe
                    - suspicious
                    - malicious
                  flagged:
                    type: boolean
                  categories:
                    type: array
                    items:
                      type: object
                      properties:
                        category:
                          type: string
                        score:
                          type: integer
                        rules:
                          type: integer
                        description:
                          type: string
                  findings:
                    type: array
                    items:
                      type: object
                      properties:
                        rule:
                          type: string
                        category:
                          type: string
                        weight:
                          type: number
                        start:
                          type: integer
                        end:
                          type: integer
                        location:
                          type: string
                        text:
                          type: string
                  hidden:
                    type: object
                  decoded:
                    type: array
                  chars_scanned:
                    type: integer
                  truncated:
                    type: boolean
                  ruleset:
                    type: string
                  tools:
                    type: array
                    description: 'tools= mode: one result per tool'
                  hidden_html:
                    type: object
                    description: 'url= mode: hidden HTML segments checked and flagged'
              example:
                input: text
                risk_score: 0
                verdict: safe
                flagged: false
                categories: []
                findings: []
                hidden:
                  zero_width: 0
                  bom_soft_hyphen: 0
                  bidi_controls: 0
                  unicode_tags: 0
                  homoglyph_words: 0
                decoded: []
                chars_scanned: 49
                truncated: false
                ruleset: 2026.10.1
                ms: 1
        '400':
          description: Invalid input (never charged)
        '402':
          description: Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)
        '403':
          description: url= blocked by robots.txt (never charged)
        '502':
          description: url= fetch failed (never charged)
      description: 'Prompt injection detection API for AI agents. Scan text or a URL for prompt injection. Search intents: prompt injection detection, prompt injection scanner, jailbreak detection api, llm security api, ai guardrails, scan text for prompt injection.'
    post:
      operationId: scan_post
      summary: Scan text, a URL, or MCP tool definitions
      tags:
      - InjectScan
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.003'
        protocols:
        - x402: {}
      x-x402:
        scheme: exact
        network: eip155:8453
        asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
        payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        amount: '3000'
        assetSymbol: USDC
        x402Versions:
        - 2
        - 1
        networks:
        - network: eip155:8453
          name: Base
          asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: eip155:137
          name: Polygon
          asset: '0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: eip155:42161
          name: Arbitrum One
          asset: '0xaf88d065e77c8cC2239327C5EDb3A432268e5831'
          symbol: USDC
          payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
        - network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
          name: Solana
          asset: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
          symbol: USDC
          payTo: FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                text:
                  type: string
                  maxLength: 100000
                url:
                  type: string
                  format: uri
                tools:
                  type: array
                  maxItems: 100
                  items:
                    type: object
              oneOf:
              - required:
                - text
              - required:
                - url
              - required:
                - tools
            example:
              text: Please summarize this article about solar panels.
      responses:
        '200':
          description: Scan result (payment settled)
          content:
            application/json:
              schema:
                type: object
                properties:
                  input:
                    type: string
                    enum:
                    - text
                    - url
                    - tools
                  risk_score:
                    type: integer
                    minimum: 0
                    maximum: 100
                  verdict:
                    type: string
                    enum:
                    - safe
                    - suspicious
                    - malicious
                  flagged:
                    type: boolean
                  categories:
                    type: array
                    items:
                      type: object
                      properties:
                        category:
                          type: string
                        score:
                          type: integer
                        rules:
                          type: integer
                        description:
                          type: string
                  findings:
                    type: array
                    items:
                      type: object
                      properties:
                        rule:
                          type: string
                        category:
                          type: string
                        weight:
                          type: number
                        start:
                          type: integer
                        end:
                          type: integer
                        location:
                          type: string
                        text:
                          type: string
                  hidden:
                    type: object
                  decoded:
                    type: array
                  chars_scanned:
                    type: integer
                  truncated:
                    type: boolean
                  ruleset:
                    type: string
                  tools:
                    type: array
                    description: 'tools= mode: one result per tool'
                  hidden_html:
                    type: object
                    description: 'url= mode: hidden HTML segments checked and flagged'
              example:
                input: text
                risk_score: 0
                verdict: safe
                flagged: false
                categories: []
                findings: []
                hidden:
                  zero_width: 0
                  bom_soft_hyphen: 0
                  bidi_controls: 0
                  unicode_tags: 0
                  homoglyph_words: 0
                decoded: []
                chars_scanned: 49
                truncated: false
                ruleset: 2026.10.1
                ms: 1
        '400':
          description: Invalid input (never charged)
        '402':
          description: Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)
        '403':
          description: url= blocked by robots.txt (never charged)
        '502':
          description: url= fetch failed (never charged)
      description: 'Prompt injection detection API for AI agents. Scan text, a URL, or MCP tool definitions. Search intents: prompt injection detection, prompt injection scanner, jailbreak detection api, llm security api, ai guardrails, scan text for prompt injection.'
  /injectscan/v1/scan/preview:
    get:
      operationId: scan_preview
      summary: Free scan for text up to 2,000 characters (10/min/IP)
      security: []
      responses:
        '200':
          description: OK
      parameters:
      - name: text
        in: query
        required: true
        schema:
          type: string
          maxLength: 2000
      tags:
      - InjectScan
    post:
      operationId: scan_preview_post
      summary: Free scan (POST {"text"})
      security: []
      responses:
        '200':
          description: OK
      tags:
      - InjectScan
components:
  securitySchemes:
    creditsKey:
      type: http
      scheme: bearer
      description: yatc_... credits key