One request in. One verdict out.
Five checks run in parallel on the text you send, in memory, and return together as a single response.
Sends the prompt, the model response, or both.
POST /api/v1/guardrail/check- Prompt injection
- PII
- Content safety
- Hallucination
- Custom rules
- safe
- false
- blocked
- true
- score
- 0.12
The four built-in checks
Each one scores the text independently and reports its own violations. Custom rules, on Growth and Enterprise, run alongside.
Stops instructions hidden in user input from reaching your model.
What it catches
- Jailbreak attempts
- Instruction overrides
- Role hijacking
- Delimiter injection
- System prompt extraction
How it decides
A pattern library of known attacks plus semantic similarity scoring for novel variations.
What comes back
A high-severity violation, which blocks the request.
Ten lines, any stack.
Official SDKs for nine languages, or call the REST endpoint directly. The request shape is the same everywhere.
- Check the input, the response, or both in one call
- Choose which checks run per request or per API key
- Batch up to 20 items in a single request
- SDKs fail open after 300ms so your app never stalls
Every response has the same shape
Read blocked for the binary decision, score for a threshold of your own, and violations for the reasons.
Latency
Checks are pattern-based, so there is no model inference in the hot path.
- 5
- checks, run in parallel
- 40-80ms
- typical round trip
- <200ms
- p99 latency under load
- 300ms
- SDK timeout, then fail open
Your prompts are never stored.
Text is checked in memory and discarded. We keep the timestamp, violation types, score, and latency, plus the first 100 characters for debugging.