{"uid":"cap_EfeO4koONsq5N1hE87ZVT","slug":"leakguard-sensitive-data-scanner-cee8742c","name":"LeakGuard Sensitive Data Scanner","description":"Deep secret and PII leak scan API for text and JSON. Deep leak scan of text or a JSON payload: findings by JSON path, redacted JSON, remediation steps, and for leaked seed phrases or private keys the wallet addresses they control with native and USDC balances on Base, Ethereum, Polygon, Arbitrum and Solana (funds at risk now?).","url":"https://api.youraitools.co/leakguard/v1/scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["text"],"properties":{"text":{"type":"string","description":"Text to check before it is sent (prompt, tool arguments, log, message, file content). POST /v1/scan also accepts {\"json\": <any JSON payload>}."},"style":{"enum":["label","mask"],"type":"string","description":"label: [REDACTED:type] (default); mask: keep the last 4 digits / email domain for PII"},"types":{"type":"string","description":"Optional comma-separated finding types or categories to report (wallet_key, secret, pii, email, ...)"},"min_severity":{"enum":["low","medium","high","critical"],"type":"string"}},"description":"Search intents: secret scanning api, json pii scan, leaked private key check, credential leak detection, dlp api, redact json"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"tier":{"type":"string"},"input":{"type":"object"},"counts":{"type":"object"},"engine":{"type":"string"},"actions":{"type":"array"},"verdict":{"type":"string"},"exposure":{"type":"object"},"findings":{"type":"array"},"redacted":{"type":"string"},"checked_at":{"type":"string"},"confidence":{"type":"string"},"max_severity":{"type":"string"},"safe_to_send":{"type":"boolean"},"sources_failed":{"type":"array"}}}}}}},"responseSchema":{"type":"json","example":{"tier":"scan","input":{"kind":"text","bytes":185,"strings_scanned":1},"counts":{"email":1,"bip39_mnemonic":1,"aws_access_key_id":1},"engine":"leakguard-0.1.0 (leakguard-engine/0.1.0)","actions":["URGENT: a leaked key controls a wallet that holds funds right now. Move the f..."],"verdict":"WALLET_KEY_EXPOSED","exposure":{"status":"funds_at_risk","addresses":[{"path":"m/44'/60'/0'/0/0","type":"bip39_mnemonic","family":"evm","status":"used_empty","address":"0x9858EfFD232B4033E47d90003D41EC34EcaEda94","finding":0,"balances":{"base":{"usdc":"0","funded":false,"native":"0","tx_count":5313},"polygon":{"usdc":"0","funded":false,"native":"0","tx_count":13405},"arbitrum":{"usdc":"0","funded":false,"native":"0","tx_count":849},"ethereum":{"usdc":"0","funded":false,"native":"0","tx_count":1679}}}],"not_checked":[],"chains_checked":["base"],"sources_failed":[]},"findings":[{"end":130,"type":"bip39_mnemonic","start":37,"preview":"[REDACTED:bip39_mnemonic]","category":"wallet_key","severity":"critical","validator":"bip39 checksum ok (12 words)","confidence":0.99,"remediation":"Treat the wallet as compromised: create a new seed offline and move all funds..."}],"redacted":"agent log: restored wallet from seed [REDACTED:bip39_mnemonic]; aws key [REDA...","checked_at":"2026-10-22T19:07:15.558Z","confidence":"high","max_severity":"critical","safe_to_send":false,"sources_failed":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3qpIuPZTquXNyDOL71qdj","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans text for leaked secrets, PII, wallet keys, and API credentials before they are sent, logging them or forwarding them","exampleAgentPrompt":"Before sending this agent log to our analytics service, scan it for any leaked secrets, wallet keys, or PII — use the 'mask' style so email domains and last 4 digits are preserved, and flag anything at medium severity or above: 'restored wallet from seed abandon abandon... aws key AKIA123...'","exampleUseCases":[{"title":"Pre-send prompt safety check","prompt":"Before you forward this tool call output to the external logging API, scan it for any exposed private keys, mnemonics, or AWS credentials and tell me if it's safe to send: 'agent restored wallet from seed [abandon abandon ... art], called AWS with key AKIAIOSFODNN7EXAMPLE'."},{"title":"Agent log PII audit","prompt":"Scan this agent session log for any email addresses or personal data before I archive it — use label style so I can see exactly what types were found: 'user john.doe@example.com requested a transfer, balance confirmed'."},{"title":"Wallet key exposure detection","prompt":"Check this text snippet for any BIP39 mnemonics or exposed wallet seeds and tell me if any addresses are at risk: 'backup phrase: legal winner thank year wave sausage worth useful legal winner thank yellow'."}],"resultDescription":"Returns a JSON object with a verdict (e.g. WALLET_KEY_EXPOSED), a list of findings each with type, severity, confidence, preview, and remediation advice, a redacted version of the input text, an exposure block with any derived wallet addresses and on-chain balances checked, counts of each finding type, and a safe_to_send boolean indicating whether the text is safe to forward.","failureModes":["Missing required 'text' query parameter returns a validation error","Invalid 'style' or 'min_severity' enum value returns 400","Very large text payloads may be truncated or rejected","Chain RPC failures may leave some addresses unchecked (sources_failed populated)","False negatives possible for obfuscated or encoded secrets","Payment failure via x402 results in 402 response before scan runs"],"whenToPreferThis":"Use this endpoint when an AI agent needs to inspect outbound text — prompts, logs, tool arguments, or messages — for secrets, credentials, PII, or crypto wallet keys before forwarding them to a third party. It is particularly valuable in agentic pipelines where LLMs may inadvertently reproduce sensitive content from context. It is better than generic regex filters because it includes BIP39 checksum validation, on-chain balance checking for exposed wallets, and structured remediation advice. Choose it when you need a confidence score and severity triage, not just a yes/no flag.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T12:42:52.914Z","isFirstParty":false,"canonicalSlug":"leakguard-sensitive-data-scanner-cee8742c"}