API Reference - Prompt Inspector

Base URL

All API requests are made to:

https://promptinspector.io

Authentication

Every request must include your App API Key via one of these headers:

Header	Format
`X-App-Key`	`your-api-key`
`Authorization`	`Bearer your-api-key`

See Authentication for details on obtaining and managing API keys.

Content Type

All request and response bodies use JSON:

Content-Type: application/json

Endpoints

Method	Endpoint	Description
`POST`	`/api/v1/detect/sdk`	Detect prompt injection in text (for SDK and direct API usage)
`GET`	`/api/v1/verify-key`	Verify that an API key is valid and active

Rate Limits

Rate limits are enforced per App and depend on your subscription plan:

Per-minute rate limit — Maximum requests per minute
Monthly quota — Maximum total requests per billing cycle
Text length limit — Maximum characters per input_text

When a rate limit is exceeded, the API returns 429 Too Many Requests. See Error Handling for details.

Response Format

Success Response (200)

{
  "request_id": "abc-123-def-456",
  "result": {
    "is_safe": false,
    "score": 0.95,
    "category": ["prompt_injection"]
  },
  "latency_ms": 42
}

Error Response (4xx / 5xx)

{
  "detail": "A human-readable error description."
}

Detect Endpoint

See the full detect endpoint documentation with request and response schemas.

​Base URL

​Authentication

​Content Type

​Endpoints

​Rate Limits

​Response Format

​Success Response (200)

​Error Response (4xx / 5xx)