API archive entry · source-reported

InjectScan

Scores text, web pages and MCP tool definitions for prompt injection with deterministic rules

Provider / source website

From the publisher

README & documentation

Source preview

Read the project’s overview, installation instructions and usage examples. The original README is the source of truth.

Prompt-injection detection for AI agents (MCP server + x402 API). Safety check only. InjectScan is a deterministic, documented rule engine. It returns a risk score (0-100), a verdict (safe / suspicious / malicious), the categories that fired, and every finding as a character span in your original text, so you can highlight or strip it. Use it on web pages, emails, documents, tool results and other agents' messages before your agent acts on them. Claude Code: Claude Desktop: Settings > Connectors > Add custom connector with the URL above, or in claudedesktopconfig.json: Cursor (/.cursor/mcp.json), or one click: Add to Cursor Each free result includes an upgrade field with the calls left today. Past the daily limit the tool returns a paymentrequired (402) result with the paid x402 URL. Requires Node.js 20+ (or Docker). The server has no runtime dependencies. No git? Download…

Duffey234/injectscan on GitHub A short preview, not the full document.

Read the full README ↗ · Preview checked 2026-11-04T20:02:08.264Z

Inside the original README — Document outline
  1. InjectScan
  2. Use the hosted server (no install)
  3. Self-host: run from source (no npm registry)
  4. Docker
  5. Test
  6. Full source

Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.

Documentation belongs to its respective authors. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.

Access at a glance

These are reported access facts. Check the current documentation before integrating.

  • Authentication: No auth.
  • HTTPS: not confirmed.
  • Browser access (CORS): Unknown.

Pricing and limits

Current plans, quotas, and rate limits have not been reviewed for this listing. Check the provider’s current terms; no authentication does not necessarily mean free usage.

Documentation and sources

Imported from public-apis/public-apis. A detailed editorial review has not been published yet.

Provider / source reference

public-apis/public-apis · MIT directory metadata

More MCP Servers APIs

iGaming Tools

Online slot specs, RTP variants, providers, regulators, news, jobs and search demand

No auth · HTTPS unconfirmed · CORS Unknown

LucyESL

English-teaching jobs in South Korea with pay, hours and housing as facts, plus salary statistics

No auth · HTTPS unconfirmed · CORS Unknown

PourWire

New US liquor license filings: restaurants and bars about to open in 7 metros, plus metro stats

No auth · HTTPS unconfirmed · CORS Unknown

OpenApps

Rankings, launches and featuring across the ChatGPT, Claude, Cursor and Grok Bot app stores

No auth · HTTPS unconfirmed · CORS Unknown

XposedOrNot

Check an email against known data breaches, read its breach history and get domain breach counts

No auth · HTTPS unconfirmed · CORS Unknown

Toolalize

Unit and live currency conversion tools for agents, no key needed

No auth · HTTPS unconfirmed · CORS Unknown

Source reference

public-apis/public-apis

This page separates source-reported facts from questions that need live provider verification.