YourAITools Inject Scan API
The InjectScan API from YourAITools — 2 operation(s) for injectscan.
The InjectScan API from YourAITools — 2 operation(s) for injectscan.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/youraitools-co:youraitools-co-injectscan-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: YourAITools Inject Scan API
version: 1.0.0
description: Pay-per-call tools for AI agents, paid per request in USDC via x402 on Base, Polygon, Arbitrum One or Solana, with each tool's own spec at https://api.youraitools.co//openapi.json.
contact:
email: hello@youraitools.co
url: https://youraitools.co/built-by-us
servers:
- url: https://api.youraitools.co
tags:
- name: InjectScan
paths:
/injectscan/v1/scan:
get:
operationId: scan
summary: Scan text or a URL for prompt injection
tags:
- InjectScan
x-payment-info:
price:
mode: fixed
currency: USD
amount: '0.003'
protocols:
- x402: {}
x-x402:
scheme: exact
network: eip155:8453
asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
amount: '3000'
assetSymbol: USDC
x402Versions:
- 2
- 1
networks:
- network: eip155:8453
name: Base
asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: eip155:137
name: Polygon
asset: '0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: eip155:42161
name: Arbitrum One
asset: '0xaf88d065e77c8cC2239327C5EDb3A432268e5831'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
name: Solana
asset: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
symbol: USDC
payTo: FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte
parameters:
- name: text
in: query
schema:
type: string
description: Text to scan
example: Please summarize this article about solar panels.
- name: url
in: query
schema:
type: string
format: uri
description: Public http(s) page to fetch and scan (visible + hidden HTML)
responses:
'200':
description: Scan result (payment settled)
content:
application/json:
schema:
type: object
properties:
input:
type: string
enum:
- text
- url
- tools
risk_score:
type: integer
minimum: 0
maximum: 100
verdict:
type: string
enum:
- safe
- suspicious
- malicious
flagged:
type: boolean
categories:
type: array
items:
type: object
properties:
category:
type: string
score:
type: integer
rules:
type: integer
description:
type: string
findings:
type: array
items:
type: object
properties:
rule:
type: string
category:
type: string
weight:
type: number
start:
type: integer
end:
type: integer
location:
type: string
text:
type: string
hidden:
type: object
decoded:
type: array
chars_scanned:
type: integer
truncated:
type: boolean
ruleset:
type: string
tools:
type: array
description: 'tools= mode: one result per tool'
hidden_html:
type: object
description: 'url= mode: hidden HTML segments checked and flagged'
example:
input: text
risk_score: 0
verdict: safe
flagged: false
categories: []
findings: []
hidden:
zero_width: 0
bom_soft_hyphen: 0
bidi_controls: 0
unicode_tags: 0
homoglyph_words: 0
decoded: []
chars_scanned: 49
truncated: false
ruleset: 2026.10.1
ms: 1
'400':
description: Invalid input (never charged)
'402':
description: Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)
'403':
description: url= blocked by robots.txt (never charged)
'502':
description: url= fetch failed (never charged)
description: 'Prompt injection detection API for AI agents. Scan text or a URL for prompt injection. Search intents: prompt injection detection, prompt injection scanner, jailbreak detection api, llm security api, ai guardrails, scan text for prompt injection.'
post:
operationId: scan_post
summary: Scan text, a URL, or MCP tool definitions
tags:
- InjectScan
x-payment-info:
price:
mode: fixed
currency: USD
amount: '0.003'
protocols:
- x402: {}
x-x402:
scheme: exact
network: eip155:8453
asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
amount: '3000'
assetSymbol: USDC
x402Versions:
- 2
- 1
networks:
- network: eip155:8453
name: Base
asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: eip155:137
name: Polygon
asset: '0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: eip155:42161
name: Arbitrum One
asset: '0xaf88d065e77c8cC2239327C5EDb3A432268e5831'
symbol: USDC
payTo: '0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F'
- network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
name: Solana
asset: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
symbol: USDC
payTo: FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
text:
type: string
maxLength: 100000
url:
type: string
format: uri
tools:
type: array
maxItems: 100
items:
type: object
oneOf:
- required:
- text
- required:
- url
- required:
- tools
example:
text: Please summarize this article about solar panels.
responses:
'200':
description: Scan result (payment settled)
content:
application/json:
schema:
type: object
properties:
input:
type: string
enum:
- text
- url
- tools
risk_score:
type: integer
minimum: 0
maximum: 100
verdict:
type: string
enum:
- safe
- suspicious
- malicious
flagged:
type: boolean
categories:
type: array
items:
type: object
properties:
category:
type: string
score:
type: integer
rules:
type: integer
description:
type: string
findings:
type: array
items:
type: object
properties:
rule:
type: string
category:
type: string
weight:
type: number
start:
type: integer
end:
type: integer
location:
type: string
text:
type: string
hidden:
type: object
decoded:
type: array
chars_scanned:
type: integer
truncated:
type: boolean
ruleset:
type: string
tools:
type: array
description: 'tools= mode: one result per tool'
hidden_html:
type: object
description: 'url= mode: hidden HTML segments checked and flagged'
example:
input: text
risk_score: 0
verdict: safe
flagged: false
categories: []
findings: []
hidden:
zero_width: 0
bom_soft_hyphen: 0
bidi_controls: 0
unicode_tags: 0
homoglyph_words: 0
decoded: []
chars_scanned: 49
truncated: false
ruleset: 2026.10.1
ms: 1
'400':
description: Invalid input (never charged)
'402':
description: Payment Required (x402 v2 terms in the PAYMENT-REQUIRED header, v1 terms in the body)
'403':
description: url= blocked by robots.txt (never charged)
'502':
description: url= fetch failed (never charged)
description: 'Prompt injection detection API for AI agents. Scan text, a URL, or MCP tool definitions. Search intents: prompt injection detection, prompt injection scanner, jailbreak detection api, llm security api, ai guardrails, scan text for prompt injection.'
/injectscan/v1/scan/preview:
get:
operationId: scan_preview
summary: Free scan for text up to 2,000 characters (10/min/IP)
security: []
responses:
'200':
description: OK
parameters:
- name: text
in: query
required: true
schema:
type: string
maxLength: 2000
tags:
- InjectScan
post:
operationId: scan_preview_post
summary: Free scan (POST {"text"})
security: []
responses:
'200':
description: OK
tags:
- InjectScan
components:
securitySchemes:
creditsKey:
type: http
scheme: bearer
description: yatc_... credits key