Skip to main content
Glama

Prompt Shield

prompt_shield
Read-onlyIdempotent

Detection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNo'fast' = pattern scan only (default), 'deep' = pattern + Groq semantic analysis
emailNoZambo Pass email for unlimited calls (optional)
promptYesThe user input or prompt to validate for injection/jailbreak (max 16K chars)
systemNoYour system prompt - also scanned for prompt leak attempts (optional)
contextNoDescribe your app for better contextual analysis (optional)
_zambo_keyNoOptional opaque Zambo access capability. Never place it in a URL or public log.
_session_idNoOptional stable bot-job ID. Reuse it across calls to bind a Day Pass and keep the job ledger together.
certificateNoIf true, freeze this scan as a permanent public certificate and return certificate_url (optional)
_caller_labelNoOptional caller label recorded as a caller-reported claim in the receipt.
_continuity_ai_labelNoOptional self-reported AI client label for the private continuity timeline. Zambo does not independently verify the client.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesThe tool's observed JSON value or plain-text result.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed3 schema fields changed
    • changedInput schema / properties / _caller_label / description
      Previous value: -"Optional self-reported caller label. It is recorded as a claim, not independently verified."New value: +"Optional caller label recorded as a caller-reported claim in the receipt."
    • changedInput schema / properties / _session_id / description
      Previous value: -"Optional stable Zambo session ID used to preserve continuity across tool calls."New value: +"Optional stable bot-job ID. Reuse it across calls to bind a Day Pass and keep the job ledger together."
    • addedInput schema / properties / _zambo_key
      Added value: +{
      +  "description": "Optional opaque Zambo access capability. Never place it in a URL or public log.",
      +  "maxLength": 160,
      +  "type": "string"
      +}
  2. Changed6 schema fields changed
    • changedOutput schema / additionalProperties
      Previous value: -trueNew value: +false
    • addedOutput schema / properties / result
      Added value: +{
      +  "description": "The tool's observed JSON value or plain-text result."
      +}
    • removedOutput schema / properties / safe
      Removed value: -{
      -  "type": "boolean"
      -}
    • removedOutput schema / properties / sanitized
      Removed value: -{
      -  "type": "string"
      -}
    • removedOutput schema / properties / threats
      Removed value: -{
      -  "items": {
      -    "type": "string"
      -  },
      -  "type": "array"
      -}
    • addedOutput schema / required
      Added value: +[
      +  "result"
      +]
  3. Changed2 schema fields changed
    • addedInput schema / properties / _caller_label
      Added value: +{
      +  "description": "Optional self-reported caller label. It is recorded as a claim, not independently verified.",
      +  "maxLength": 80,
      +  "type": "string"
      +}
    • addedInput schema / properties / _session_id
      Added value: +{
      +  "description": "Optional stable Zambo session ID used to preserve continuity across tool calls.",
      +  "maxLength": 64,
      +  "type": "string"
      +}
  4. Changed2 schema fields changed
    • addedInput schema / properties / _continuity_ai_label
      Added value: +{
      +  "description": "Optional self-reported AI client label for the private continuity timeline. Zambo does not independently verify the client.",
      +  "maxLength": 48,
      +  "type": "string"
      +}
    • changedInput schema / properties / system / description
      Previous value: -"Your system prompt — also scanned for prompt leak attempts (optional)"New value: +"Your system prompt - also scanned for prompt leak attempts (optional)"
  5. First observed

TDQS

Score is being calculated.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources