---
title: "Fetch a web page and scan it for prompt-injection attempts (120 rules; visible and hidden text)."
method: GET
path: "/v1/scan"
---

# Fetch a web page and scan it for prompt-injection attempts (120 rules; visible and hidden text).

`GET /v1/scan`

## Request

- Base URL: `https://fetchgate.dev`
- URL: `https://fetchgate.dev/v1/scan`
- Auth: none declared

Use before letting an agent act on untrusted web content. Scans the page's visible text and, separately, text hidden in HTML comments and alt/title/aria/meta attributes. Returns a 0-100 risk score, a recommended action and each match with evidence. Free daily tier, then $0.003 via x402.

## Query parameters

- `url` string, uri, required

## Response `200`

Scan result.

- object

## Other responses

- `400`: Missing or invalid url.
- `402`: Free tier exhausted; payment required.
- `502`: Upstream fetch failed.

---

[API](https://skmtc.dev/fetchgate/apis/fetchgate-api.md) · [All operations](https://skmtc.dev/fetchgate/apis/fetchgate-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fetchgate/apis/fetchgate-api/revisions/8925577a6e79?raw)