Skip to content
Arcjet Docs

Prompt injection detection for Vercel AI SDK

Arcjet prompt injection detection evaluates each incoming prompt for injection patterns inside your application before it reaches the AI provider. Detected attacks are blocked before the AI call is made, protecting both your application behavior and your AI budget.

What is Arcjet? Arcjet is the runtime security platform that ships with your code. Enforce budgets, stop prompt injection, detect bots, and protect personal information with Arcjet's AI security building blocks.

Quick start

Section titled “Quick start”

This example screens inbound user text for prompt injection before the model runs.

We assume you already have a Vercel AI SDK project set up. For helper options and denial behavior, see the Vercel AI SDK agent guard.

Install the dependencies:

Terminal window
# Export your Arcjet API key from https://console.arcjet.com
export ARCJET_KEY="ajkey_..."


npm install @arcjet/guard ai @ai-sdk/provider-utils

Create the example:

agent.ts
import { launchArcjet, detectPromptInjection } from "@arcjet/guard";
import { generateText } from "ai";


const arcjet = launchArcjet({ key: process.env.ARCJET_KEY! });
const inbound = detectPromptInjection();


export async function runAgent(userId: string, prompt: string) {
  const decision = await arcjet.guard({
    label: "message.received",
    actor: userId,
    rules: [inbound(prompt)],
  });


  if (decision.conclusion === "DENY" || decision.hasFailedOpen()) {
    throw new Error("Prompt injection detected – rephrase your message");
  }


  return generateText({
    model: "openai/gpt-4o-mini",
    prompt,
  });
}

Then start or invoke the agent with a test prompt.

Requests appear in your Arcjet dashboard in real time.

What next?

Section titled “What next?”
Prompt injection detection intro Learn how prompt injection detection works and when to use it.
AI abuse protection Combine with bot detection for complete AI app protection.
AI data loss prevention Prevent PII from entering model context alongside prompt injection protection.
Testing Write tests for your rules.

Get help

Section titled “Get help”

Need help with anything? Email support@arcjet.com to get support from our engineering team.

Discussion