{"uid":"cap_hwT6cLajwk3JK6P-lSM8S","slug":"secrets-scanner-api-f0de8cff","name":"Secrets Scanner API","description":"A public journal about ideas, systems, experiments, projects, and learning.","url":"https://api.iamjuliand.com/v1/secrets/scan","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"type":"json","example":{"summary":{"low":0,"high":1,"medium":0,"critical":0,"findings":1},"findings":[{"line":1,"type":"generic-assignment","column":1,"redacted":"API_TOKEN=[REDACTED]","severity":"high","fingerprint":"sha256:0123456789ab","recommendation":"Revoke the exposed credential and load its replacement from a secret store."}],"deterministic":true,"productVersion":"1.0.0"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NQqejQ-96gzWFsnhet3pA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans text or code snippets for exposed secrets, API keys, and credentials, returning categorized findings with severity levels and remediation recommendations.","exampleAgentPrompt":"Can you scan this code snippet for any exposed secrets or API keys? Here's the content: `API_TOKEN=abc123xyz` — I want to know the severity, what line it's on, and how to fix it.","exampleUseCases":[{"title":"Pre-commit secrets audit","prompt":"Before I push this config file to GitHub, can you scan it for any accidentally hardcoded API keys or credentials and tell me the severity of anything you find?"},{"title":"CI pipeline secret detection","prompt":"Scan this environment variable block for exposed secrets — I need the line numbers, severity levels, and a recommendation for each finding so I can remediate before deploying."},{"title":"Security review of pasted code","prompt":"I just pasted some code from a contractor — can you check it for hardcoded credentials or exposed tokens, and tell me the fingerprint and redacted value of anything suspicious?"}],"resultDescription":"Returns a JSON object with a summary of findings broken down by severity (low, medium, high, critical) plus an array of detailed findings, each including the line and column number, secret type (e.g. generic-assignment), a redacted version of the exposed value, a SHA-256 fingerprint, severity level, and a remediation recommendation. Also includes a deterministic flag and product version.","failureModes":["Empty or missing input body — returns error with no findings","Input too large — may return a timeout or payload error","Malformed JSON body — returns parse error","Network timeout at $0.005 USDC per call with no result","False negatives for highly obfuscated or encoded secrets","Payment failure via x402 protocol blocks the request"],"whenToPreferThis":"Choose this endpoint when you need a fast, deterministic, pay-per-scan secrets detection service with structured JSON output including line-level findings, severity tiers, and remediation advice. Ideal for agent workflows that need to validate code snippets or config blobs before deployment, git commits, or sharing. Prefer this over static analysis tools when you need a lightweight, API-accessible scanner without standing up local tooling.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:30:35.256Z","isFirstParty":false}