{"uid":"cap_-_moDxDIkFbhxKnR0J5Pe","slug":"relayshield-secret-scan-e1f557d2","name":"RelayShield Secret Scan","description":"RelayShield Landing Site","url":"https://api.relayshield.net/v1/payg/secret-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"Your own domain"},"vendor_domains":{"type":"array","items":{"type":"string"},"description":"Optional: vendor domains, up to 5"}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"found":false,"findings":[],"domains_checked":1,"highest_severity":null}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.35","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.35/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.35","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.35","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__2aEUwhrxMY8emmu379ya","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.35","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a domain or text payload for exposed secrets, credentials, or sensitive data leaks and returns findings with severity ratings","exampleAgentPrompt":"Can you scan api.mycompany.com for any exposed secrets or leaked credentials and tell me if anything sensitive is publicly visible?","exampleUseCases":[{"title":"Pre-launch security check for SaaS","prompt":"Before we go live, can you scan our domain app.acmecorp.io for any exposed API keys, tokens, or hardcoded secrets that might have leaked publicly?"},{"title":"Developer credential exposure audit","prompt":"I think one of our developers may have accidentally committed secrets — can you check dev.myservice.com to see if any credentials or environment variables are exposed?"},{"title":"Third-party vendor security review","prompt":"We're onboarding a new vendor at vendor-api.thirdparty.com — can you run a secret scan on their domain and tell me the highest severity finding before we integrate with them?"}],"resultDescription":"Returns a JSON object indicating whether secrets were found (found boolean), a list of findings with details, the number of domains checked, and the highest severity level among findings (or null if none found).","failureModes":["Invalid or unreachable domain returns error or empty findings","Malformed request body causes 400 bad request","Payment not attached or insufficient results in 402 payment required","Rate limiting may return 429 if too many scans submitted rapidly","Private or firewall-protected endpoints may not be scannable, returning no findings even if secrets exist"],"whenToPreferThis":"Use this endpoint when you need to programmatically check a domain for exposed secrets, API keys, tokens, or credentials as part of a security audit, CI/CD pipeline gate, or vendor assessment workflow. Prefer RelayShield when you want a pay-per-scan model with no subscription and need structured JSON findings including severity ratings.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T18:32:59.660Z","isFirstParty":false,"canonicalSlug":"relayshield-secret-scan-e1f557d2"}