Hello
' for safe display","Remove XSS payloads from user-submitted rich text"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/sanitize/html"},{"id":"sql_validate","name":"SQL Syntax & Injection Check","description":"Validate SQL syntax and detect injection patterns before executing queries. Supports 30+ dialects via sqlglot including PostgreSQL, MySQL, BigQuery, Snowflake, and SQLite. Catches tautologies, UNION attacks, and stacked queries.","tags":["security","validation","sql","injection"],"examples":["Check if agent-generated SQL is syntactically valid before executing","Detect SQL injection in 'SELECT * FROM users WHERE id=1 OR 1=1'","Validate a BigQuery query before submitting to the API"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/sql"},{"id":"simple_validate","name":"Data Format Validation","description":"Validate and normalize emails, URLs, UUIDs, phone numbers, and IPv4 addresses. RFC-compliant checks with normalization output. Ideal for agents in sandboxed environments that cannot install validation libraries.","tags":["validation","email","url","uuid","phone","ipv4","data-quality"],"examples":["Validate user@example.com is a real email format","Check and normalize a phone number to E.164 format","Verify a UUID before using it as a database key"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/simple"},{"id":"json_schema","name":"JSON Schema Validation","description":"Validate any JSON data against a JSON Schema definition. Supports Draft 4, 6, 7, 2019-09, and 2020-12. Use to verify LLM-generated structured output matches expected format.","tags":["validation","json","schema","structured-output"],"examples":["Validate LLM function-call output matches the expected schema","Check if API response body conforms to OpenAPI schema","Verify agent config JSON before loading"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/json-schema"},{"id":"batch_validate","name":"Batch Validation","description":"Validate up to 1,000 values in a single request. Mix types freely — emails, URLs, UUIDs, phones, IPv4 in one call. Returns per-item results with a summary. First 10 batch requests per agent count as 1 credit each (regardless of item count). After trial, per-item billing resumes. Cheaper per-item than individual calls.","tags":["validation","batch","bulk","data-quality"],"examples":["Validate a CSV column of 500 email addresses in one call","Check 100 URLs and 50 phone numbers together","Bulk-validate form submissions before database insert"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/batch"},{"id":"ip_geo_reputation","name":"IP Geo-Reputation & Sanctions","description":"Validate IP addresses and check geo-reputation. Detects private/reserved ranges, looks up country via MaxMind GeoLite2, and flags IPs from sanctioned countries. Returns reputation score.","tags":["security","ip","geo","sanctions","reputation"],"examples":["Check if an IP address is from a sanctioned country","Get the country and reputation score for 8.8.8.8","Validate IP and detect private/reserved ranges"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/ip-geo"},{"id":"secret_sweep","name":"Secret & Credential Sweeping","description":"Scan text for leaked secrets, API keys, tokens, and credentials. Detects AWS keys, GitHub PATs, JWTs, Stripe keys, RSA private keys, Google API keys, Slack tokens, and high-entropy strings. Returns detections with optional redaction.","tags":["security","secrets","credentials","api-keys","redaction"],"examples":["Scan a config file for accidentally committed API keys","Check if text contains AWS access keys or GitHub tokens","Redact secrets from log output before storing"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/detect/secrets"},{"id":"text_repair","name":"JSON & Markdown Repair","description":"Fix broken JSON (trailing commas, single quotes, comments, unquoted keys) and normalize malformed markdown tables (missing separators, uneven columns). Returns repaired text with a list of repairs made.","tags":["repair","json","markdown","formatting","data-quality"],"examples":["Fix JSON with trailing commas and single quotes","Repair a markdown table with missing separator rows","Clean up LLM-generated JSON that won't parse"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/repair/text"},{"id":"web_asset_validation","name":"Web Asset & Citation Formatting","description":"Extract and validate URLs and markdown links from text. Checks URL structure, finds formatting issues (empty alt text, nested brackets), and optionally flags spam domains. No HTTP requests made.","tags":["validation","url","markdown","links","formatting"],"examples":["Validate all URLs in an LLM-generated response","Check markdown link formatting in documentation","Find broken or malformed URLs in text"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/web-assets"},{"id":"language_toxicity","name":"Language & Toxicity Triage","description":"Detect the language of text and check for English profanity. Uses n-gram language detection and configurable English profanity word lists. Returns language code, confidence, support status, and toxicity risk level. Toxicity detection currently covers English only.","tags":["moderation","language","toxicity","profanity","content-safety"],"examples":["Check if user input is in a supported language","Screen text for profanity before publishing","Detect language and toxicity level of chat messages"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/detect/language-toxicity"},{"id":"static_scan","name":"Static Security Scan","description":"Regex-based malicious string and secret detection in source code. Detects dynamic execution (eval, exec, subprocess), hardcoded IPs, and exposed credentials. Supports custom patterns with ReDoS protection. Multi-encoding evasion detection via deep decode.","tags":["security","static-analysis","malware","secrets"],"examples":["Scan Python source for eval/exec calls and hardcoded credentials","Check if source code contains obfuscated malicious patterns","Detect dynamic execution and subprocess calls in agent code"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/scan/static"},{"id":"tool_chain_audit","name":"Tool Chain Audit","description":"AST analysis of dangerous source-to-sink tool chains. Parses Python via AST and Node.js via regex heuristics. Identifies paths from data sources (read_file, input, HTTP) to dangerous sinks (eval, exec, subprocess, HTTP POST).","tags":["security","ast-analysis","tool-chain","source-sink"],"examples":["Audit Python code for read_file -> eval chains","Check if agent tool pipeline has dangerous source-to-sink paths","Analyze Node.js code for input -> exec vulnerabilities"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/audit/tool-chain"},{"id":"adversarial_probe","name":"Adversarial Probe","description":"Honeytoken canary leak detection in execution logs. Multi-layer search: plaintext, HTML/URL decoded, base64-decoded, and URL-encoded segments. Detects exfiltration attempts by agents that leak canary tokens through encoding obfuscation.","tags":["security","canary","honeytoken","exfiltration","adversarial"],"examples":["Check if a canary token leaked in agent execution logs","Detect base64-encoded exfiltration of honeytokens","Probe logs for URL-encoded canary leak attempts"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/probe/adversarial"}],"pricing":{"freeTier":{"requests":200},"paid":{"simple":0.001,"structural":0.002,"deep":0.005,"deep_pii":0.008,"batch":0.0005},"paymentProtocol":"x402","currency":"USDC","network":"eip155:8453"},"authentication":{"schemes":[{"scheme":"x402","description":"USDC micropayments on Base via x402 protocol","network":"eip155:8453","facilitatorUrl":"https://api.cdp.coinbase.com/platform/v2/x402"}]},"defaultInputModes":["application/json"],"defaultOutputModes":["application/json"]}