Skip to main content
Glama

Paid: prompt-injection scan (0.01 USDC)

paid_injection_scan

Know whether a text or public page is trying to steer your agent before the agent reads it: overrides, fake roles, exfiltration, tool abuse, payment requests, invisible Unicode or HTML-hidden text, base64 payloads. Rule-based evidence (what matched and where), signed and logged, with what was not checked stated. Free signed sample: /x402/injection-scan/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Input Schema

NameRequiredDescriptionDefault
urlNo
textNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, and it does: rule-based methodology, evidence returned as what matched and where, explicit 'what was not checked' disclosure, signing and logging, and — critically — the exact payment negotiation protocol (call without payment yields an isError result with a 402 object in structuredContent; retry with the signed payment in _meta['x402/payment']). That is unusually rich behavioral disclosure for a paid tool with zero annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the value proposition and detection categories, then the evidence/trust properties, then the payment mechanics — a sensible ordering with no filler sentences. It is dense to the point of being a single wall of clauses, and the free-sample URL interrupts the flow, but every element carries information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no annotations and no output schema, the description covers the payment handshake, the signing guarantee, and the limits of its own analysis — the hard parts. The remaining gap is input contract detail (empty defaults, mutual exclusivity of url/text), which is the one thing an agent could get wrong on a first call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% — url and text have no descriptions at all — so the description must compensate. It does partially, mapping 'a text or public page' onto the two parameters, but it never states that both are optional with empty-string defaults, whether they are mutually exclusive, or which wins when both are supplied. An agent can guess the mapping but not the selection rule.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — determine whether text or a public page is attempting to steer the agent — and enumerates the concrete signal classes it detects (overrides, fake roles, exfiltration, tool abuse, payment requests, invisible Unicode, base64). This is clearly distinguishable from siblings like paid_citation_check, paid_mcp_audit, or verify_quote, which cover different verification domains.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear operational context ('before the agent reads it'), which tells an agent exactly where in a pipeline to place the call, plus a free sample endpoint to validate the shape first. It stops short of naming alternatives or stating exclusions (e.g., when a plain text heuristic is unnecessary), so it is clear context without explicit when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.