For Builders & Companies

The AI Layer
Your Product
Needs

Prompt injection defense, code auditing, provenance certs, wallet scoring, and strategy AI - all as REST APIs. No auth, no setup, free tier. Drop any endpoint into your product today.

Browse the API Docs → Add 100+ Tools to Claude
100+
Live API tools
0
Auth steps required
10
Free calls/day per IP
2
MCP servers
$49
Unlimited/month
What you can build

Drop These Into Your Product

Every endpoint is live, documented, and callable right now. No waitlist, no approval.

🛡️

Prompt Injection Defense

Protect any AI feature from injection, jailbreak, and policy bypass. Two-phase: instant pattern scan + Groq semantic analysis. Returns risk score + rewritten safe version.

POST /api/prompt-shield
📜

Provenance Certificates

Give users tamper-proof proof of what your AI produced. SHA-256 certs, permanent, publicly verifiable. Anyone can verify at the cert URL - no account needed.

POST /api/proof/certify
🔍

Code Quality Scoring

Score any public code hosting repo 0-100 before you acquire, hire, or fund. Security audit, dead code map, maintainability rating, tech debt breakdown.

POST /api/provibe
🧠

Strategy AI Layer

Background enrichment for CRMs, onboarding flows, and investor tools. Deep strategic analysis: traction score, bottleneck, fastest path to revenue.

POST /api/zambro/analyze
🏦

Wallet Intelligence

Score any wallet address for trust, history, and DeFi behavior. Used by fintech apps and DeFi dashboards for risk scoring before transactions.

GET /api/criptic/score/:wallet
🤖

100+ MCP Tools for Your AI

Give Claude, Cursor, or any MCP client live web search, on-chain data, lead gen, code audits, agent payments, and more. One JSON line.

POST /api/mcp
Integrate in minutes

Copy. Paste. Ship.

Every endpoint works the same way - no SDK, no setup, no account. Just HTTP.

Prompt injection defense - protect any user input
20/day free
curl -X POST https://zambo.dev/api/prompt-shield \
  -H "Content-Type: application/json" \
  -d '{"prompt": "{{USER_INPUT}}"}'

// Response
{
  "recommendation": "block",   // safe | review | block
  "injection_risk": 90,         // 0-100
  "risk_level": "critical",
  "jailbreak_detected": true,
  "analysis": { "safe_version": "..." }
}
Certify an AI output - permanent provenance
5/day free
curl -X POST https://zambo.dev/api/proof/certify \
  -H "Content-Type: application/json" \
  -d '{"content": "{{AI_OUTPUT}}", "label": "{{VERSION}}"}'

// Response
{
  "cert_id": "a3f9c1d2e8b047...",
  "verify_url": "https://zambo.dev/api/proof/verify/...",
  "certified_at": "2026-07-01T00:00:00.000Z"
}
Add 100+ tools to Claude / Cursor / Windsurf - one line
Free forever
{
  "mcpServers": {
    "zambo": { "url": "https://zambo.dev/api/mcp" }
  }
}
Who uses this

Built for Every Builder

From solo developers to funded companies - if you're shipping AI, you need this layer.

AI Startups

Prompt Shield in front of every user input. Proof certs on every AI output. Ship with trust baked in.

Solo Builders

Add production-grade AI features without hiring a team. Full stack, no ops, no auth, just endpoints.

VCs & Acquirers

ProvibeCode every repo before due diligence. Score, risk, tech debt - in 30 seconds.

DeFi Apps

Wallet scoring and on-chain intel via REST. Risk-score any address before it touches your protocol.

AI Agent Builders

Start with the canonical Zambo MCP URL. Add X711 or Entangler directly only when you need those separate infrastructure products.

Enterprise Teams

Replace internal tooling with live endpoints. Zambo Pass provides authenticated access for production workloads; a valid capability key bypasses anonymous MCP quota and burst gates, while product-specific allowances still apply.

Questions

Frequently Asked

No. Every endpoint works without authentication. Native Zambo MCP tools allow 20 calls/tool/day per IP (40/day for Signal-verified agents). Pass your registered Zambo Pass email as pass_email where supported for eligible upgraded access.
Yes. zambo.dev runs on Node.js 24 + Express 5 with an active five-model Groq cascade and PostgreSQL-backed routes. Provider failures remain visible to the caller instead of being presented as completed work. Live since 2025.
Zambo Pass is $49/mo. It provides priority MCP access and the listed product benefits, including LeadSignal Pro, 5 ProvibeCode audits/month, and 50 ZAMBOT Sparks/month. Product-specific allowances still apply. See pricing.
Yes. Add {"mcpServers":{"zambo":{"url":"https://zambo.dev/api/mcp"}}} to your MCP config. One connection gives your AI the core tools immediately and access to the full 100+ capability catalog through the same URL. See the connect page for client-specific setup.
A five-model Groq cascade uses the current provider order and falls back when a model is unavailable. Provider failures remain visible to the caller; Zambo does not turn a blocked run into a completed result.
Yes. Available at /openapi.json and /api/mcp for the full MCP tools/list response. The /agent.json contains machine-readable product and endpoint discovery data.

START BUILDING NOW

No account, no card, no approval. Pick an endpoint, paste the curl, ship it. Upgrade when you need production volume.