developer · developer · research · secret · credentials · security · source-code · scan

Secret scan

Scan source code or configuration text for leaked API keys, tokens, and credentials without returning secret values.

$0.05 USDCBasex402 v2POST

Endpoint

https://apiacre.com/v1/developer/secret-scan

Send the JSON body below. An unpaid request returns HTTP 402 with a PAYMENT-REQUIRED header; an x402-compatible buyer signs the requirement and retries with PAYMENT-SIGNATURE.

Input example

{
  "content": "API_TOKEN=replace-with-your-token"
}

Response shape

{
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
  "service": "developer.secret-scan",
  "version": "1",
  "data": {
    "clean": true,
    "findingCount": 1,
    "findings": []
  },
  "meta": {
    "duration_ms": 42,
    "cached": false,
    "sources": [],
    "warnings": []
  }
}

Try the payment challenge

curl -i -X POST 'https://apiacre.com/v1/developer/secret-scan' \
  -H 'content-type: application/json' \
  --data '{"content":"API_TOKEN=replace-with-your-token"}'