superagent_

// context guardrails

Web pages

Score a URL before an agent reads it: domain identity, page behavior, and rendered content.

Score a URL before an agent fetches or summarizes the page. Superagent checks who owns the domain, how the page behaves, and what the visible and hidden text actually say.

How scoring works

A page scan runs in three tiers:

  1. Identity — domain age (RDAP), TLS certificate, registrar reputation, hosting ASN, and optional blocklists (URLhaus, Google Web Risk, PhishTank).
  2. Static analysis — redirect chains, hidden DOM, deceptive links, prompt-injection and exfiltration patterns, and obfuscated JavaScript.
  3. Rendered review — Kernel headless Chrome renders the page, then GPT-5.6 Luna Pro via OpenRouter scores the visible and hidden text. This tier runs when deterministic checks are uncertain. If Kernel is not configured, the LLM still reviews the static HTML.

A blocklisted host short-circuits to score 0 / dangerous. New lookups return a preliminary identity score immediately and finish the deep scan in the background. Pass mode=full when you need the completed result in one request.

Identifier

The identifier is a hostname (example.com fetches https://example.com/) or a hostname plus path (example.com/docs). Hostnames are case-insensitive. Paths may include additional / segments.

Use it

  • Dashboard: open Agents → Context, paste a URL, and open the result for identity, behavior, and content scores.
  • REST API: GET /api/v1/context/web_page/{identifier}. See the Context Guardrails API.
  • MCP: get_context_score.
curl "https://superagent.sh/api/v1/context/web_page/example.com?details=true" \
  -H "Authorization: Bearer sk_live_..."
curl "https://superagent.sh/api/v1/context/web_page/example.com/docs?mode=full&details=true" \
  -H "Authorization: Bearer sk_live_..."

Next steps