Skip to content
developer · developer · research · credential-leak · secret-detection · api-key · source-code · configuration

Redacted credential leak scan

Detect likely leaked API keys, tokens, private-key headers, JWTs, and credential assignments in caller-supplied source or configuration text. Return type, line, fingerprint, and a fully redacted preview with no network access or code execution.

$0.005 USDCBase + Solanax402 v2POST
Pay $0.005 USDC and run in your browserView free result sample

Endpoint

https://apiacre.com/v1/developer/secret-scan

Send the JSON body below. An unpaid request returns HTTP 402 with a PAYMENT-REQUIRED header; an x402-compatible buyer signs the requirement and retries with PAYMENT-SIGNATURE.

Pay $0.005 USDC and run in your browser

Official Coinbase agent path

Coinbase Agentic Wallet can satisfy this x402 request in one command. Running it may pay automatically, so --max-amount is fixed to $0.005 USDC in atomic units. Copying the command does not install, authenticate, sign, or pay; review the request and use a separate low-value wallet before running it.

npx --yes awal@latest x402 pay https://apiacre.com/v1/developer/secret-scan \
  -X POST \
  -d '{"content":"API_TOKEN=example-not-a-real-secret"}' \
  --max-amount 5000 \
  --json

Coinbase pay-for-service documentation · Buyer setup and wallet safety

Alternative third-party AgentCash commands

Run check first without payment. Its fetch command may automatically pay up to the exact listed price.

npx --yes agentcash@latest check https://apiacre.com/v1/developer/secret-scan
npx --yes agentcash@latest fetch https://apiacre.com/v1/developer/secret-scan \
  --method POST \
  --header 'content-type: application/json' \
  --body '{"content":"API_TOKEN=example-not-a-real-secret"}' \
  --payment-protocol x402 \
  --payment-network base \
  --max-amount 0.005

AgentCash CLI documentation

Input example

{
  "content": "API_TOKEN=example-not-a-real-secret"
}

Response shape

View free static sample JSON

{
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
  "service": "developer.secret-scan",
  "version": "1",
  "data": {
    "clean": false,
    "findingCount": 1,
    "findings": [
      {
        "type": "generic_assignment",
        "line": 1,
        "fingerprint": "360b25f697c5fca0",
        "preview": "[REDACTED]"
      }
    ]
  },
  "meta": {
    "duration_ms": 42,
    "cached": false,
    "sources": [],
    "warnings": [],
    "next_actions": []
  }
}

Try the payment challenge

curl -i -X POST 'https://apiacre.com/v1/developer/secret-scan' \
  -H 'content-type: application/json' \
  --data '{"content":"API_TOKEN=example-not-a-real-secret"}'