{"uid":"cap_FkKZbQvMIa8jtmm4YFQiY","slug":"secrets-audit-api-3ac8412d","name":"secrets-audit API","description":"Detect leaked secrets/credentials in code, configs, and text. x402 v2 micropayments on Base.","url":"https://eltociear-secrets-audit.hf.space/audit","method":"POST","headers":{},"bodySchema":{"type":"object","title":"AuditRequest","required":["content"],"properties":{"content":{"type":"string","title":"Content"}}},"responseSchema":{"type":"json","example":{"findings":[],"risk_level":"SAFE","risk_score":0,"total_findings":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_KppqtDksN462RZ9jCRl0c","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans code, config files, and text for leaked secrets or credentials and returns a risk score with detailed findings","exampleAgentPrompt":"Can you scan this code snippet for any leaked secrets or hardcoded credentials and tell me the risk level? Here's the file: `DATABASE_URL=postgres://admin:supersecret123@prod.db.example.com/mydb`","exampleUseCases":[{"title":"Pre-commit secret detection workflow","prompt":"Before I push these changes to the repo, can you quickly scan all the files I'm about to commit and let me know if any secrets or credentials accidentally slipped in? I want to catch any API keys or database passwords before they go live."},{"title":"Configuration file security audit","prompt":"I just inherited this project and want to make sure the environment configs are clean. Can you check all the .env and config files for any exposed credentials, API keys, or private tokens that might be hanging around?"},{"title":"Automated CI/CD pipeline gating","prompt":"We're setting up a security checkpoint in our deployment pipeline. Can you scan the entire codebase and generated artifacts for any leaked secrets, and give me a risk summary so we know whether it's safe to deploy?"}],"resultDescription":"Returns a JSON object with a list of findings (each identifying the type and location of a detected secret), an overall risk_level string (e.g. SAFE, LOW, MEDIUM, HIGH), a numeric risk_score, and a total_findings count. An empty findings array with risk_level SAFE indicates no secrets were detected.","failureModes":["Empty or missing input body returns no findings with SAFE status","Very large payloads may time out or be truncated","False negatives possible for obfuscated or encoded secrets","False positives possible for dummy/example credential patterns","Service unavailability on Hugging Face Spaces during cold start"],"whenToPreferThis":"Use this endpoint when you need a quick, low-cost ($0.01 USDC) automated scan of code, config files, or arbitrary text to detect leaked secrets before committing or deploying. Ideal for CI/CD pre-checks, one-off audits, or agent-driven security workflows where a lightweight per-call micropayment model is acceptable.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T21:27:33.230Z","isFirstParty":false}