{"uid":"cap_SCSx-HlnjMK_qML0QgJqo","slug":"defi-shield-hazel-vercel-app-cce5a8f6","name":"DeFi Shield Secrets Scanner","description":"","url":"https://defi-shield-hazel.vercel.app/api/dev/secrets-scan","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","bodyType","body","method"],"properties":{"body":{"properties":{"code":{"type":"string","description":"Code or text to scan for leaked secrets"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":{"request":{"input":{"body":{"code":"function connectDatabase() {\n  const dbUri = 'mongodb://user:password123@localhost:27017/myapp';\n  const apiKey = 'sk_test_1234567890abcdef';\n  return dbUri;\n}"},"type":"http","method":"POST","bodyType":"json"}},"response":{"findings":[{"type":"mongodb_uri","severity":"critical","line_number":2,"redacted_match":"mongod***app"},{"type":"password_in_url","severity":"high","line_number":2,"redacted_match":"://use***23@"}],"analyzed_at":"2026-06-18T04:24:59.652Z","total_found":2,"lines_scanned":5,"patterns_checked":22,"response_time_ms":2,"secrets_detected":true,"severity_summary":{"high":1,"medium":0,"critical":1}}},"exampleRequest":{"code":"function connectDatabase() {\n  const dbUri = 'mongodb://user:password123@localhost:27017/myapp';\n  const apiKey = 'sk_test_1234567890abcdef';\n  return dbUri;\n}"},"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_J0BVUaDK3EsBUgj9KmT-h","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans text or code for exposed secrets including AWS keys, GitHub tokens, Stripe keys, OpenAI keys, PEM keys, JWTs, database URIs, Slack tokens, Google credentials, Twilio keys, SendGrid keys, and passwords","exampleAgentPrompt":"Scan this text for any exposed secrets or credentials — AWS keys, GitHub tokens, OpenAI keys, JWTs, database URIs, Stripe keys, Twilio tokens, PEM keys, or hardcoded passwords: 'AKIA1234ABCD5678EFGH sk-openai-abc123 postgres://admin:hunter2@db.example.com:5432/prod'","exampleUseCases":null,"resultDescription":"Returns a list of detected secrets with their type (e.g. AWS_ACCESS_KEY, OPENAI_API_KEY, DB_URI), the matched pattern or redacted value, severity level, and optionally remediation recommendations for each finding. Returns an empty list if no secrets are detected.","failureModes":["Empty or missing input body returns a 400 error","Very large payloads may time out or be truncated","Obfuscated or encoded secrets may evade pattern matching","False positives on test/placeholder values that resemble real credentials","Payment failure or insufficient USDC balance returns a 402 error"],"whenToPreferThis":"Use this endpoint when you need to detect a broad range of secret types in a single scan — especially when you need to cover AWS, GitHub, Stripe, OpenAI, PEM keys, JWTs, DB URIs, Slack, Google, Twilio, and SendGrid credentials simultaneously. Prefer this over manual regex checks or general-purpose code analysis tools when comprehensive multi-provider credential detection is needed in an automated or agentic workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:51:07.273Z","isFirstParty":false}