Protect AI website screenshot

Protect AI

Protect AI is an AI/ML security platform (now part of Palo Alto Networks) whose products secure the AI lifecycle from model selection to runtime. Its developer surface centers on LLM Guard, an open-source Python toolkit of prompt and output scanners that ships a self-hostable REST API for real-time input/output sanitization. Commercial products - Guardian (model scanning), Recon (LLM red-teaming), and Layer (runtime protection) - are delivered through a portal under sales-led terms.

Protect AI publishes 3 APIs on the APIs.io network: Output API, Prompt API, and System API. Tagged areas include Artificial Intelligence, ML, Security, LLM, and Guardrails.

Protect AI’s developer surface includes authentication, documentation, engineering blog, and 8 more developer resources.

33.6/100 thin ▬ flat Agent 20/100 agent aware Full breakdown ↓
scored 2026-08-25 · rubric v0.14.0
AccessFreemiumSelf serve⚡ Free to try
6 APIs
Artificial IntelligenceMLSecurityLLMGuardrails

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-25 · rubric v0.14.0
Composite quality — 33.6/100 · thin
Contract Quality 12.4 / 25
Developer Ergonomics 3.8 / 20
Access Clarity 7.9 / 20
Operational Transparency 3.1 / 13
Contract Governance 0.0 / 12
Discoverability 6.5 / 10
Agent readiness — 20/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Delegated User Identity 0 / 6
Protected Resource Metadata 0 / 5
Registration Without a Human 0 / 6
Agentic Commerce Surface 0 / 5
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/protectai: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

Guardian (Model Scanning)

Commercial AI model security product that scans first- and third-party models for serialization attacks, malicious code, and supply-chain threats before they reach production. T...

Recon (Red-Teaming)

Commercial automated red-teaming product that rigorously tests LLM and GenAI applications for vulnerabilities, jailbreaks, and policy violations. Delivered as a sales-led platfo...

Layer (Runtime)

Commercial runtime security product that monitors and controls AI applications in production with deep visibility and inline threat prevention. Delivered as a sales-led platform...

Protect AI Output API

The Output API from Protect AI — 2 operation(s) for output.

Protect AI Prompt API

The Prompt API from Protect AI — 2 operation(s) for prompt.

Protect AI System API

The System API from Protect AI — 4 operation(s) for system.

Open Collections 5

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

LLM Guard Output API

OPEN COLLECTION

LLM Guard API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Protectai Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Protectai Authentication

http · 1 scheme

SECURITY

Protectai Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Protectai Agentic Access

8 operations · 4 acting

8 operations · 4 acting

AGENTIC

Resources

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: protectai
url: https://raw.githubusercontent.com/api-evangelist/protectai/refs/heads/main/apis.yml
name: Protect AI
kind: company
description: Protect AI is an AI/ML security platform (now part of Palo Alto Networks) whose products secure the AI lifecycle
  from model selection to runtime. Its developer surface centers on LLM Guard, an open-source Python toolkit of prompt and
  output scanners that ships a self-hostable REST API for real-time input/output sanitization. Commercial products - Guardian
  (model scanning), Recon (LLM red-teaming), and Layer (runtime protection) - are delivered through a portal under sales-led
  terms.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/protectai.png
tags:
- Artificial Intelligence
- ML
- Security
- LLM
- Guardrails
tags_raw:
- AI
- ML
- Security
- LLM
- Guardrails
created: '2026-06-20'
modified: '2026-06-20'
specificationVersion: '0.23'
apis:
- aid: protectai:guardian-model-scanning
  name: Guardian (Model Scanning)
  tags:
  - Model Scanning
  - Supply Chain
  - MLSecOps
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://protectai.com/guardian
  baseURL: https://protectai.com/guardian
  properties:
  - url: https://protectai.com/guardian
    type: Documentation
  - url: https://github.com/protectai/modelscan
    type: GitHub
  description: Commercial AI model security product that scans first- and third-party models for serialization attacks, malicious
    code, and supply-chain threats before they reach production. The open-source ModelScan project (Apache 2.0) provides the
    underlying model-scanning engine; Guardian itself is a sales-led platform without a documented public REST API.
- aid: protectai:recon-red-teaming
  name: Recon (Red-Teaming)
  tags:
  - Red Teaming
  - Adversarial Testing
  - LLM
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://protectai.com/recon
  baseURL: https://protectai.com/recon
  properties:
  - url: https://protectai.com/recon
    type: Documentation
  description: Commercial automated red-teaming product that rigorously tests LLM and GenAI applications for vulnerabilities,
    jailbreaks, and policy violations. Delivered as a sales-led platform; no public REST API surface is documented.
- aid: protectai:layer-runtime
  name: Layer (Runtime)
  tags:
  - Runtime Security
  - Observability
  - Threat Detection
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://protectai.com/layer
  baseURL: https://protectai.com/layer
  properties:
  - url: https://protectai.com/layer
    type: Documentation
  description: Commercial runtime security product that monitors and controls AI applications in production with deep visibility
    and inline threat prevention. Delivered as a sales-led platform; no public REST API surface is documented.
- aid: protectai:protectai-output-api
  name: Protect AI Output API
  description: The Output API from Protect AI — 2 operation(s) for output.
  humanURL: https://llm-guard.com/api/overview/
  baseURL: http://localhost:8000
  tags:
  - Output
  properties:
  - type: OpenAPI
    url: openapi/protectai-output-api-openapi.yml
  - type: Documentation
    url: https://llm-guard.com/
  - type: APIReference
    url: https://llm-guard.com/api/overview/
  - type: GitHub
    url: https://github.com/protectai/llm-guard
- aid: protectai:protectai-prompt-api
  name: Protect AI Prompt API
  description: The Prompt API from Protect AI — 2 operation(s) for prompt.
  humanURL: https://llm-guard.com/api/overview/
  baseURL: http://localhost:8000
  tags:
  - Prompt
  properties:
  - type: OpenAPI
    url: openapi/protectai-prompt-api-openapi.yml
  - type: Documentation
    url: https://llm-guard.com/
  - type: APIReference
    url: https://llm-guard.com/api/overview/
  - type: GitHub
    url: https://github.com/protectai/llm-guard
- aid: protectai:protectai-system-api
  name: Protect AI System API
  description: The System API from Protect AI — 4 operation(s) for system.
  humanURL: https://llm-guard.com/api/overview/
  baseURL: http://localhost:8000
  tags:
  - System
  properties:
  - type: OpenAPI
    url: openapi/protectai-system-api-openapi.yml
  - type: Documentation
    url: https://llm-guard.com/
  - type: APIReference
    url: https://llm-guard.com/api/overview/
  - type: GitHub
    url: https://github.com/protectai/llm-guard
common:
- type: AgenticAccess
  url: agentic-access/protectai-agentic-access.yml
- type: DomainSecurity
  url: security/protectai-domain-security.yml
- type: Authentication
  url: authentication/protectai-authentication.yml
- type: GitHubOrganization
  url: https://github.com/protectai
- type: LinkedIn
  url: https://www.linkedin.com/company/protect-ai
- type: Website
  url: https://protectai.com/
- type: Documentation
  url: https://llm-guard.com/
- type: Plans
  url: plans/protectai-plans-pricing.yml
- type: RateLimits
  url: rate-limits/protectai-rate-limits.yml
- type: FinOps
  url: finops/protectai-finops.yml
- url: https://protectai.com/blog/rss.xml
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/protectai"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/protectai/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/protectai/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.