Hello
' for safe display","Remove XSS payloads from user-submitted rich text"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/sanitize/html"},{"id":"sql_validate","name":"SQL Syntax & Injection Check","description":"Validate SQL syntax and detect injection patterns before executing queries. Supports 30+ dialects via sqlglot including PostgreSQL, MySQL, BigQuery, Snowflake, and SQLite. Catches tautologies, UNION attacks, and stacked queries.","tags":["security","validation","sql","injection"],"examples":["Check if agent-generated SQL is syntactically valid before executing","Detect SQL injection in 'SELECT * FROM users WHERE id=1 OR 1=1'","Validate a BigQuery query before submitting to the API"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/sql"},{"id":"simple_validate","name":"Data Format Validation","description":"Validate and normalize emails, URLs, UUIDs, phone numbers, and IPv4 addresses. RFC-compliant checks with normalization output. Ideal for agents in sandboxed environments that cannot install validation libraries.","tags":["validation","email","url","uuid","phone","ipv4","data-quality"],"examples":["Validate user@example.com is a real email format","Check and normalize a phone number to E.164 format","Verify a UUID before using it as a database key"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/simple"},{"id":"json_schema","name":"JSON Schema Validation","description":"Validate any JSON data against a JSON Schema definition. Supports Draft 4, 6, 7, 2019-09, and 2020-12. Use to verify LLM-generated structured output matches expected format.","tags":["validation","json","schema","structured-output"],"examples":["Validate LLM function-call output matches the expected schema","Check if API response body conforms to OpenAPI schema","Verify agent config JSON before loading"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/json-schema"},{"id":"batch_validate","name":"Batch Validation","description":"Validate up to 1,000 values in a single request. Mix types freely — emails, URLs, UUIDs, phones, IPv4 in one call. Returns per-item results with a summary. First 10 batch requests per agent count as 1 credit each (regardless of item count). After trial, per-item billing resumes. Cheaper per-item than individual calls.","tags":["validation","batch","bulk","data-quality"],"examples":["Validate a CSV column of 500 email addresses in one call","Check 100 URLs and 50 phone numbers together","Bulk-validate form submissions before database insert"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/batch"},{"id":"ip_geo_reputation","name":"IP Geo-Reputation & Sanctions","description":"Validate IP addresses and check geo-reputation. Detects private/reserved ranges, looks up country via MaxMind GeoLite2, and flags IPs from sanctioned countries. Returns reputation score.","tags":["security","ip","geo","sanctions","reputation"],"examples":["Check if an IP address is from a sanctioned country","Get the country and reputation score for 8.8.8.8","Validate IP and detect private/reserved ranges"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/ip-geo"},{"id":"secret_sweep","name":"Secret & Credential Sweeping","description":"Scan text for leaked secrets, API keys, tokens, and credentials. Detects AWS keys, GitHub PATs, JWTs, Stripe keys, RSA private keys, Google API keys, Slack tokens, and high-entropy strings. Returns detections with optional redaction.","tags":["security","secrets","credentials","api-keys","redaction"],"examples":["Scan a config file for accidentally committed API keys","Check if text contains AWS access keys or GitHub tokens","Redact secrets from log output before storing"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/detect/secrets"},{"id":"text_repair","name":"JSON & Markdown Repair","description":"Fix broken JSON (trailing commas, single quotes, comments, unquoted keys) and normalize malformed markdown tables (missing separators, uneven columns). Returns repaired text with a list of repairs made.","tags":["repair","json","markdown","formatting","data-quality"],"examples":["Fix JSON with trailing commas and single quotes","Repair a markdown table with missing separator rows","Clean up LLM-generated JSON that won't parse"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/repair/text"},{"id":"web_asset_validation","name":"Web Asset & Citation Formatting","description":"Extract and validate URLs and markdown links from text. Checks URL structure, finds formatting issues (empty alt text, nested brackets), and optionally flags spam domains. No HTTP requests made.","tags":["validation","url","markdown","links","formatting"],"examples":["Validate all URLs in an LLM-generated response","Check markdown link formatting in documentation","Find broken or malformed URLs in text"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/validate/web-assets"},{"id":"language_toxicity","name":"Language & Toxicity Triage","description":"Detect the language of text and check for English profanity. Uses n-gram language detection and configurable English profanity word lists. Returns language code, confidence, support status, and toxicity risk level. Toxicity detection currently covers English only.","tags":["moderation","language","toxicity","profanity","content-safety"],"examples":["Check if user input is in a supported language","Screen text for profanity before publishing","Detect language and toxicity level of chat messages"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/detect/language-toxicity"},{"id":"static_scan","name":"Static Security Scan","description":"Regex-based malicious string and secret detection in source code. Detects dynamic execution (eval, exec, subprocess), hardcoded IPs, and exposed credentials. Supports custom patterns with ReDoS protection. Multi-encoding evasion detection via deep decode.","tags":["security","static-analysis","malware","secrets"],"examples":["Scan Python source for eval/exec calls and hardcoded credentials","Check if source code contains obfuscated malicious patterns","Detect dynamic execution and subprocess calls in agent code"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/scan/static"},{"id":"tool_chain_audit","name":"Tool Chain Audit","description":"AST analysis of dangerous source-to-sink tool chains. Parses Python via AST and Node.js via regex heuristics. Identifies paths from data sources (read_file, input, HTTP) to dangerous sinks (eval, exec, subprocess, HTTP POST).","tags":["security","ast-analysis","tool-chain","source-sink"],"examples":["Audit Python code for read_file -> eval chains","Check if agent tool pipeline has dangerous source-to-sink paths","Analyze Node.js code for input -> exec vulnerabilities"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/audit/tool-chain"},{"id":"adversarial_probe","name":"Adversarial Probe","description":"Honeytoken canary leak detection in execution logs. Multi-layer search: plaintext, HTML/URL decoded, base64-decoded, and URL-encoded segments. Detects exfiltration attempts by agents that leak canary tokens through encoding obfuscation.","tags":["security","canary","honeytoken","exfiltration","adversarial"],"examples":["Check if a canary token leaked in agent execution logs","Detect base64-encoded exfiltration of honeytokens","Probe logs for URL-encoded canary leak attempts"],"inputModes":["application/json"],"outputModes":["application/json"],"uri":"https://validate-agent.fly.dev/api/v1/probe/adversarial"}],"provenance":[{"source":"github_code","first_seen":"2026-05-14T12:46:42.526569+00:00"},{"source":"recrawl_hot","first_seen":"2026-05-14T15:30:04.303389+00:00"},{"source":"registry","first_seen":"2026-05-15T00:28:13.033428+00:00"}],"recent_probes":[{"fetched_at":"2026-05-22T18:02:43.495595+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":247,"live_responds":false},{"fetched_at":"2026-05-22T11:59:48.689997+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":249,"live_responds":false},{"fetched_at":"2026-05-22T05:39:36.214670+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":147,"live_responds":false},{"fetched_at":"2026-05-22T04:25:00.423503+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":159,"live_responds":false},{"fetched_at":"2026-05-20T18:00:55.272599+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":260,"live_responds":false},{"fetched_at":"2026-05-20T16:51:16.289613+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":265,"live_responds":false},{"fetched_at":"2026-05-20T15:38:46.512239+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":258,"live_responds":false},{"fetched_at":"2026-05-20T12:44:38.730199+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":157,"live_responds":false},{"fetched_at":"2026-05-20T11:14:51.929543+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":271,"live_responds":false},{"fetched_at":"2026-05-20T09:25:45.238477+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":264,"live_responds":false}],"catalog_attestation":null,"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"gRZpxTiO_lFC3wblxNzxqpqDBcR_GPamsKBRFhZEENeyVfu0KHryNiTLHwudSA3-aJRZ4gNpUnEoC6fVgHW5Ew"}]}