BastionLLM

Example Endpoint

Intentionally vulnerable demo endpoint

This fake chat API exists so you can see a BastionLLM report without configuring your own backend. Attack prompts that include BastionLLM canaries are echoed back, including a leaked fake system prompt.

Scan this endpointPOST /api/chat/simulated
JSON

POST /api/chat/simulated

Example request

{
  "message": { "value": "{{PROMPT}}" }
}

Example response (benign prompt)

{
  "answer": {
    "value": "Hello, this is BastionLLM. Contact [email protected] for help setting up your endpoint."
  }
}

Response field path: answer.value. Injection probes instead echo canaries such as BASTION_INJECTION_OK.

How to set up in BastionLLM

  1. Set the URL to https://bastionllm.com/api/chat/simulated
  2. Use payload schema { "message": { "value": "{{PROMPT}}" } }
  3. Set response mode to JSON and response field path to answer.value
Streaming (SSE / NDJSON)

POST /api/chat/simulated

Example request

{
  "message": { "value": "{{PROMPT}}" },
  "stream": true
}

Example response (NDJSON)

Each line is one word from the response. Use type: token and the value field.

{"type":"token","value":"Hello,"}
{"type":"token","value":"this"}
{"type":"token","value":"is"}
{"type":"token","value":"BastionLLM."}
{"type":"token","value":"Contact"}
{"type":"token","value":"[email protected]"}
{"type":"token","value":"for"}
{"type":"token","value":"help"}
{"type":"token","value":"setting"}
{"type":"token","value":"up"}
{"type":"token","value":"your"}
{"type":"token","value":"endpoint."}

How to set up in BastionLLM

  1. Set the URL to https://bastionllm.com/api/chat/simulated
  2. Use payload schema { "message": { "value": "{{PROMPT}}" }, "stream": true }
  3. Set response mode to SSE and message field path to value
  4. Optionally filter by event type key type and value token
Raw Text

POST /api/chat/simulated/raw

Example request

{
  "message": { "value": "{{PROMPT}}" }
}

Example response (application/octet-stream)

The entire response body is streamed as plain text, token by token, without JSON wrapping.

Hello, this is BastionLLM. Contact [email protected] for help setting up your endpoint.

How to set up in BastionLLM

  1. Set the URL to https://bastionllm.com/api/chat/simulated/raw
  2. Use payload schema { "message": { "value": "{{PROMPT}}" } }
  3. Set response mode to RAW