consider adding Arcjet advanced signals for client-side bot detection that catches sophisticated headless browsers. See https://docs.arcjet.com/bot-protection/advanced-signals for setup.

Apr 9, 2026

General

PromptBeginner5 minmarkdown

const decision = await aj.protect(req

{

Apr 9, 2026

General

PromptBeginner5 minmarkdown

requested: 1

// tokens to deduct for rate limiting

Apr 9, 2026

Find agent skills by outcome

Detects jailbreaks

Read https://docs.arcjet.com/llms.txt for comprehensive SDK documentation covering all frameworks

Secure AI/LLM endpoints with layered protection: prompt injection detection

description: Protect AI chat and completion endpoints from abuse — detect prompt injection and jailbreak attempts

Best practices — legend-first

Add AI protection

Visual symbol table — per ELV system (CCTV

PDF Type detection — Vector vs Scanned

pdfcount

$humanized_text (The rewritten text

$humanization_strategy (Outline the specific techniques you will use to humanize the text

$analysis_of_ai_characteristics (Identify areas that sound robotic

mc

**Vercel AI SDK**: Arcjet works alongside the Vercel AI SDK. Call `protect()` before `streamText()` / `generateText()`. If denied

**Multiple models / providers**: Use the same Arcjet instance regardless of which AI provider you use. Arcjet operates at the HTTP layer

- `list-requests` — confirm decisions are being recorded

Adapt the response format to your framework (e.g.

console.warn(Arcjet error:

sensitiveInfoValue: userMessage

detectPromptInjectionMessage: userMessage

return Response.json({ error: Forbidden }

Always include `shield()` (WAF) and `detectBot()` as base layers. Bots scraping AI endpoints are a common abuse vector. For endpoints accessed via browsers (e.g. chat interfaces)

const decision = await aj.protect(req

requested: 1

Vercel AI SDK: Arcjet works alongside the Vercel AI SDK. Call `protect()` before `streamText()` / `generateText()`. If denied

Multiple models / providers: Use the same Arcjet instance regardless of which AI provider you use. Arcjet operates at the HTTP layer