Example inputPOST /api/v1/x402/xss-signal-scan
{
"text": "<script>alert(1)</script>"
}Portable intent card · application-security
XSS Signal Scan API for agents
Screen untrusted text for common cross-site scripting signals without echoing it. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and production controls.
Intent to transaction
One command, attributed.
The source header follows this discovery route through challenge, payment and delivery without exposing the buyer or request body.
npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/xss-signal-scan -m POST -H 'x-delx-source: intent-card-xss-signal-scan-api' --max-amount 0.003 -b '{"text":"<script>alert(1)</script>"}'Agent discoverydelx/intent-card/v1
{
"intent": "XSS Signal Scan for an agent workflow",
"tool_name": "util_xss_signal_scan",
"price_usdc": "0.003",
"machine_url": "https://commerce.delx.ai/intents/xss-signal-scan-api.json"
}Portable and inspectable