For Builders & Companies

The AI Layer
Your Product
Needs

Prompt injection defense, code auditing, provenance certs, wallet scoring, and strategy AI — all as REST APIs. No auth, no setup, free tier. Drop any endpoint into your product today.

Browse the API Docs → Add 50+ Tools to Claude
50+
Live API tools
0
Auth steps required
50
Free calls/day per IP
2
MCP servers
$49
Unlimited/month
What you can build

Drop These Into Your Product

Every endpoint is live, documented, and callable right now. No waitlist, no approval.

🛡️

Prompt Injection Defense

Protect any AI feature from injection, jailbreak, and policy bypass. Two-phase: instant pattern scan + Groq semantic analysis. Returns risk score + rewritten safe version.

POST /api/prompt-shield
📜

Provenance Certificates

Give users tamper-proof proof of what your AI produced. SHA-256 certs, permanent, publicly verifiable. Anyone can verify at the cert URL — no account needed.

POST /api/proof/certify
🔍

Code Quality Scoring

Score any GitHub repo 0–100 before you acquire, hire, or fund. Security audit, dead code map, maintainability rating, tech debt breakdown.

POST /api/provibe
🧠

Strategy AI Layer

Background enrichment for CRMs, onboarding flows, and investor tools. Deep strategic analysis: traction score, bottleneck, fastest path to revenue.

POST /api/zambro/analyze
🏦

Wallet Intelligence

Score any wallet address for trust, history, and DeFi behavior. Used by fintech apps and DeFi dashboards for risk scoring before transactions.

GET /api/criptic/score/:wallet
🤖

50+ MCP Tools for Your AI

Give Claude, Cursor, or any MCP client live web search, on-chain data, lead gen, code audits, agent payments, and more. One JSON line.

POST /api/mcp
Integrate in minutes

Copy. Paste. Ship.

Every endpoint works the same way — no SDK, no setup, no account. Just HTTP.

Prompt injection defense — protect any user input
50/day free
curl -X POST https://zambo.dev/api/prompt-shield \
  -H "Content-Type: application/json" \
  -d '{"prompt": "{{USER_INPUT}}"}'

// Response
{
  "recommendation": "block",   // safe | review | block
  "injection_risk": 90,         // 0–100
  "risk_level": "critical",
  "jailbreak_detected": true,
  "analysis": { "safe_version": "..." }
}
Certify an AI output — permanent provenance
5/day free
curl -X POST https://zambo.dev/api/proof/certify \
  -H "Content-Type: application/json" \
  -d '{"content": "{{AI_OUTPUT}}", "label": "{{VERSION}}"}'

// Response
{
  "cert_id": "a3f9c1d2e8b047...",
  "verify_url": "https://zambo.dev/api/proof/verify/...",
  "certified_at": "2026-07-01T00:00:00.000Z"
}
Add 50+ tools to Claude / Cursor / Windsurf — one line
Free forever
{
  "mcpServers": {
    "zambo": { "url": "https://zambo.dev/api/mcp" },
    "axis":  { "url": "https://zambo.dev/api/axis-mcp" }
  }
}
Who uses this

Built for Every Builder

From solo developers to funded companies — if you're shipping AI, you need this layer.

AI Startups

Prompt Shield in front of every user input. Proof certs on every AI output. Ship with trust baked in.

Solo Builders

Add production-grade AI features without hiring a team. Full stack, no ops, no auth, just endpoints.

VCs & Acquirers

ProvibeCode every repo before due diligence. Score, risk, tech debt — in 30 seconds.

DeFi Apps

Wallet scoring and on-chain intel via REST. Risk-score any address before it touches your protocol.

AI Agent Builders

Drop both MCP servers into your agent stack. 50+ tools available to every agent you deploy.

Enterprise Teams

Replace internal tooling with battle-tested endpoints. Zambo Pass removes all rate limits for production volume.

Questions

Frequently Asked

No. Every endpoint works without authentication. Free tier is 50 calls/tool/day per IP. Pass your registered Zambo Pass email as pass_email in the request body for unlimited access.
Yes. zambo.dev runs on Node.js 24 + Express 5 with a 6-model Groq AI cascade that never returns an error — falls through llama-70b → llama-8b → llama-scout → gemma2 → qwen → mixtral → hardcoded emergency fallback. PostgreSQL-backed. Live since 2025.
Zambo Pass is $49/mo. It removes all rate limits across all endpoints and MCP tools, includes LeadSignal Pro, 5 ProvibeCode audits/month, 50 ZAMBOT Sparks, and 13+ more products. See pricing.
Yes. Add {"mcpServers":{"zambo":{"url":"https://zambo.dev/api/mcp"}}} to your MCP config. All 50+ tools are instantly available in Claude, Cursor, Windsurf, Cline, or any MCP client. See the connect page for one-click install links.
6-model Groq cascade: llama-3.3-70b is primary, then llama-3.1-8b, llama-4-scout, gemma2-9b, qwen-qwq-32b, mixtral-8x7b, with a hardcoded emergency fallback. Responses are always returned — the cascade never fails silently.
Yes. Available at /openapi.json and /api/mcp for the full MCP tools/list response. The /agent.json contains machine-readable product and endpoint discovery data.

START BUILDING NOW

No account, no card, no approval. Pick an endpoint, paste the curl, ship it. Upgrade when you need production volume.