Skip to main content
POST
/
guardrails
/
scan-url
Scan a URL for security threats including injection attacks and policy violations.
curl --request POST \
  --url https://api.enkryptai.com/guardrails/scan-url \
  --header 'Content-Type: application/json' \
  --header 'apikey: <api-key>' \
  --data '
{
  "url": "<string>",
  "detectors": {
    "topic_detector": {
      "enabled": true,
      "topic": [
        "<string>"
      ]
    },
    "nsfw": {
      "enabled": true
    },
    "toxicity": {
      "enabled": true
    },
    "pii": {
      "enabled": true,
      "entities": [
        "pii"
      ]
    },
    "injection_attack": {
      "enabled": true
    },
    "keyword_detector": {
      "enabled": true,
      "banned_keywords": [
        "<string>"
      ]
    },
    "system_prompt": {
      "enabled": false,
      "index": "system"
    },
    "copyright_ip": {
      "enabled": false
    },
    "policy_violation": {
      "enabled": true,
      "policy_text": "<string>",
      "coc_policy_name": "<string>",
      "need_explanation": true
    },
    "bias": {
      "enabled": true
    },
    "sponge_attack": {
      "enabled": false
    }
  }
}
'
{
  "summary": {
    "injection_attack": 1,
    "bias": 1,
    "policy_violation": 0
  },
  "details": {
    "url": "https://example.com",
    "metadata": {
      "title": "Example Domain",
      "language": "en"
    },
    "total_fragments": 2,
    "fragments_with_detections": 2,
    "detections": [
      {
        "unsafe_content": "Example Domain",
        "chunk_type": "title",
        "triggered_detectors": [
          "bias"
        ],
        "detector_details": {
          "injection_attack": {
            "safe": "0.999417",
            "attack": "0.000583",
            "most_unsafe_content": "Example Domain",
            "compliance_mapping": {}
          },
          "policy_violation": {
            "policy_violation": {
              "violating_policy": "No Violation Found",
              "explanation": "No Violation Found"
            }
          },
          "bias": {
            "bias": {
              "bias_detected": true,
              "debiased_text": "Example Website",
              "compliance_mapping": {
                "owasp_llm_2025": [
                  "LLM09:2025 Misinformation",
                  "LLM04:2025 Data and Model Poisoning"
                ],
                "mitre_atlas": [],
                "nist_ai_rmf": [
                  "MEASURE 2.1-2.5 (AI system bias evaluation & management)"
                ],
                "eu_ai_act": [
                  "Article 10(2)(f), Article 15(3) (Bias detection, correction & mitigation)"
                ],
                "iso_iec_standards": [
                  "ISO/IEC TR 24027: 5.2 (Bias in AI systems)"
                ]
              }
            }
          }
        }
      },
      {
        "unsafe_content": "Example Domain This domain is for use in documentation examples without needing permission. Avoid use in operations. Learn more",
        "chunk_type": "text_block",
        "triggered_detectors": [
          "injection_attack",
          "bias"
        ],
        "detector_details": {
          "injection_attack": {
            "safe": "0.030481",
            "attack": "0.969519",
            "most_unsafe_content": "Example Domain This domain is for use in documentation examples without needing permission. Avoid use in operations. Learn more",
            "compliance_mapping": {
              "owasp_llm_2025": [
                "LLM01:2025 Prompt Injection"
              ],
              "mitre_atlas": [
                "AML.T0051: LLM Prompt Injection",
                "AML.T0054: LLM Jailbreaking"
              ],
              "nist_ai_rmf": [
                "MAP 2.3, MEASURE 2.3 (Input manipulation & adversarial attacks)"
              ],
              "eu_ai_act": [
                "Article 15(4) (Robustness against manipulation)"
              ],
              "iso_iec_standards": [
                "ISO/IEC 42001: 6.4.3",
                "ISO/IEC 27001: A.14.2"
              ]
            }
          },
          "policy_violation": {
            "policy_violation": {
              "violating_policy": "No Violation Found",
              "explanation": "No Violation Found"
            }
          },
          "bias": {
            "bias": {
              "bias_detected": true,
              "debiased_text": "This domain is intended for use in documentation purposes, providing a safe space for experimentation without impacting live systems.",
              "compliance_mapping": {
                "owasp_llm_2025": [
                  "LLM09:2025 Misinformation",
                  "LLM04:2025 Data and Model Poisoning"
                ],
                "mitre_atlas": [],
                "nist_ai_rmf": [
                  "MEASURE 2.1-2.5 (AI system bias evaluation & management)"
                ],
                "eu_ai_act": [
                  "Article 10(2)(f), Article 15(3) (Bias detection, correction & mitigation)"
                ],
                "iso_iec_standards": [
                  "ISO/IEC TR 24027: 5.2 (Bias in AI systems)"
                ]
              }
            }
          }
        }
      }
    ],
    "combined_highlight_url": "https://example.com#:~:text=Example%20Domain&text=Example%20Domain%20This,operations.%20Learn%20more"
  }
}

Authorizations

apikey
string
header
required

Body

application/json
url
string<uri>
required

The URL to scan and analyze.

detectors
GuardrailsDetectorsObject ยท object

Response

200 - application/json

Scan results for the provided URL.

summary
object
required

Summary counts of detections by detector type.

details
ScanUrlDetails ยท object
required

Detailed scan results including URL metadata and fragment-level information.