{
  "aid": "safefetch.safefetch.schemasure.com",
  "name": "SafeFetch",
  "type": "index",
  "description": "SafeFetch retrieves one public page through a three-layer SSRF guard that revalidates every redirect hop, extracts the article as Markdown or text, and returns the full redirect chain, a sha256 of the exact bytes retrieved, a retrieval timestamp, and W3C Web Annotation citation anchors (TextQuoteSelector plus TextPositionSelector) with a Text Fragment deep link for each passage. It then reports what the page was doing to whatever reads it: CSS-hidden and HTML-hidden text, invisible Unicode channels decoded rather than counted, encoded blobs, and instruction-like phrasing, each as an evidence entry carrying the decoded payload, the technique, and a span. robots.txt is fetched through the same guard and honoured by default; a disallow is a free refusal. Detection is deterministic and can be evaded by a technique not in the rule set, so `allow` means no signal was found and never that the page is safe. Nothing is retained.",
  "image": "https://safefetch.schemasure.com/icon.svg",
  "tags": [
    "web",
    "extraction",
    "markdown",
    "citations",
    "prompt-injection",
    "agent-safety",
    "ssrf",
    "provenance",
    "x402",
    "deterministic"
  ],
  "created": "2026-08-03",
  "modified": "2026-08-05",
  "specificationVersion": "0.18",
  "apis": [
    {
      "aid": "safefetch.v1.fetch",
      "name": "SafeFetch — Fetch one public page as Markdown with citation anchors, a content hash, and decoded evidence of hidden or injected instructions",
      "description": "Fetch a public web page and return clean Markdown with stable citation anchors, a content hash, and a retrieval timestamp — plus evidence of hidden text, invisible Unicode, and prompt-injection attempts found in the page. Strict SSRF protection on every redirect hop. Returns a per-span verdict with the decoded payload, not a confidence score. Zero retention.",
      "humanURL": "https://safefetch.schemasure.com/docs",
      "baseURL": "https://safefetch.schemasure.com/v1/fetch",
      "tags": [
        "web",
        "extraction",
        "markdown",
        "citations",
        "prompt-injection",
        "agent-safety",
        "ssrf",
        "provenance",
        "x402",
        "deterministic"
      ],
      "properties": [
        {
          "type": "OpenAPI",
          "url": "https://safefetch.schemasure.com/openapi.json"
        },
        {
          "type": "x402",
          "url": "https://safefetch.schemasure.com/.well-known/x402.json"
        },
        {
          "type": "Pricing",
          "url": "https://safefetch.schemasure.com/.well-known/pricing.json"
        },
        {
          "type": "Benchmarks",
          "url": "https://safefetch.schemasure.com/.well-known/benchmarks.json"
        },
        {
          "type": "LLMs",
          "url": "https://safefetch.schemasure.com/llms.txt"
        }
      ]
    }
  ]
}