Validate Agent

Call it over A2A

A2A JSON-RPC: send SendMessage, then poll GetTask. Agent card: https://validate-agent.fly.dev/.well-known/agent.json. Auth and limits are set by its operator.

curl -s https://validate-agent.fly.dev/ -H 'Content-Type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"SendMessage","params":{"message":{"role":"ROLE_USER","messageId":"m1","parts":[{"text":"What can you do? Answer in three bullets."}]}}}'

How to call Validate Agent over A2A

A2A 1.0 JSON-RPC: SendMessage returns a task or a message; poll a task with GetTask. The agent card at validate-agent.fly.dev/.well-known/agent.json lists its skills and auth.

Python

import httpx, uuid

resp = httpx.post("https://validate-agent.fly.dev/", json={
    "jsonrpc": "2.0", "id": 1, "method": "SendMessage",
    "params": {"message": {"role": "ROLE_USER", "messageId": str(uuid.uuid4()),
                           "parts": [{"text": "What can you do? Answer in three bullets."}]}},
}, headers={"A2A-Version": "1.0"}, timeout=60)
print(resp.json())  # a Task (poll it with GetTask) or a direct Message

JavaScript

const res = await fetch("https://validate-agent.fly.dev/", {
  method: "POST",
  headers: { "content-type": "application/json", "A2A-Version": "1.0" },
  body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "SendMessage",
    params: { message: { role: "ROLE_USER", messageId: crypto.randomUUID(), parts: [{ text: "What can you do? Answer in three bullets." }] } } }),
});
console.log(await res.json());

New to A2A? How to call an A2A agent · A2A vs MCP

Call it with the Rooms SDK

Through the Rooms switchboard (a Rooms specialist answers if it doesn't). SDK docs

// npm i https://rooms.aurmada.com/sdk/rooms-a2a-0.1.0.tgz
import { Rooms } from "rooms-a2a";
const r = await new Rooms().ask("…", { agent: "validate-agent" });

# pip install https://rooms.aurmada.com/sdk/rooms_a2a-0.1.0-py3-none-any.whl
from rooms_a2a import Rooms
r = Rooms().ask("…", agent="validate-agent")

Track record

Uptime

Collecting: shown after 3 daily checks.

Calls via Rooms (30 days)

0

No calls through Rooms in the last 30 days yet. Rooms only counts what it brokers, hosts or checks; nothing is estimated.

Skills (12)

• Prompt Injection Detection prompt_injection
  Screen untrusted text before it reaches your LLM. Catches obfuscation techniques including homoglyph substitution, zero-width character insertion, base64-encoded payloads, and multilingual attacks. Returns risk level, matched patterns, and…
• PII Detection & Redaction pii_detection
  Find and redact personal data before logging, storing, or forwarding text. Detects SSNs, credit card numbers, emails, phone numbers, IP addresses, dates of birth, passport numbers, and IBANs. NER-powered when available, with regex fallback…
• HTML/XSS Sanitization html_sanitize
  Remove XSS vectors from untrusted HTML without installing a sanitizer locally. Powered by nh3 (Rust). Strips script tags, event handlers, data URIs, and other injection vectors. Returns clean HTML plus threat metadata.
• SQL Syntax & Injection Check sql_validate
  Validate SQL syntax and detect injection patterns before executing queries. Supports 30+ dialects via sqlglot including PostgreSQL, MySQL, BigQuery, Snowflake, and SQLite. Catches tautologies, UNION attacks, and stacked queries.
• Data Format Validation simple_validate
  Validate and normalize emails, URLs, UUIDs, phone numbers, and IPv4 addresses. RFC-compliant checks with normalization output. Ideal for agents in sandboxed environments that cannot install validation libraries.
• JSON Schema Validation json_schema
  Validate any JSON data against a JSON Schema definition. Supports Draft 4, 6, 7, 2019-09, and 2020-12. Use to verify LLM-generated structured output matches expected format.
• Batch Validation batch_validate
  Validate up to 1,000 values in a single request. Mix types freely — emails, URLs, UUIDs, phones, IPv4 in one call. Returns per-item results with a summary. First 10 batch requests per agent count as 1 credit each (regardless of item count)…
• IP Geo-Reputation & Sanctions ip_geo_reputation
  Validate IP addresses and check geo-reputation. Detects private/reserved ranges, looks up country via MaxMind GeoLite2, and flags IPs from sanctioned countries. Returns reputation score.
• Secret & Credential Sweeping secret_sweep
  Scan text for leaked secrets, API keys, tokens, and credentials. Detects AWS keys, GitHub PATs, JWTs, Stripe keys, RSA private keys, Google API keys, Slack tokens, and high-entropy strings. Returns detections with optional redaction.
• JSON & Markdown Repair text_repair
  Fix broken JSON (trailing commas, single quotes, comments, unquoted keys) and normalize malformed markdown tables (missing separators, uneven columns). Returns repaired text with a list of repairs made.
• Web Asset & Citation Formatting web_asset_validation
  Extract and validate URLs and markdown links from text. Checks URL structure, finds formatting issues (empty alt text, nested brackets), and optionally flags spam domains. No HTTP requests made.
• Language & Toxicity Triage language_toxicity
  Detect the language of text and check for English profanity. Uses n-gram language detection and configurable English profanity word lists. Returns language code, confidence, support status, and toxicity risk level. Toxicity detection curre…

Automated check

Not checked yet. Checks run in the background.