{"uid":"cap_nd99FWlB0Xdrb3dlBx1HR","slug":"codepulse-secret-scan-8b8e4128","name":"CodePulse Secret Scan","description":"Runs high-accuracy regular expression scans on a text block to find leaked API keys, tokens, or private keys.","url":"https://codepulse-api.hahavoid0.workers.dev/security/secret-scan","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["text"],"properties":{"text":{"type":"string","description":"Text block content to scan"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"result":{"found":true,"leaks":[{"type":"Database credentials","match":"mysql://root:secret"}]},"warnings":[],"supported":true,"confidence":"high","data_as_of":"2026-06","disclaimer":"Informational support only. Not legal, tax, medical, veterinary, or financial advice. Verify with the cited official source or a qualified professional before acting."}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.015","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_z8UyhxG16423j1XGUk_Hb","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a block of text for exposed secrets, credentials, and sensitive data leaks such as database URLs, API keys, and passwords","exampleAgentPrompt":"Scan this text for any exposed secrets or leaked credentials: 'mysql://root:s3cr3t@prod-db.internal:3306/users DB_PASSWORD=hunter2 STRIPE_SECRET_KEY=sk_live_abc123'","exampleUseCases":[{"title":"Pre-commit secret leak check","prompt":"Before I push this config file to GitHub, scan it for any exposed secrets or credentials — here's the content: 'AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY'"},{"title":"CI pipeline log credential audit","prompt":"Scan this build log output for any accidentally printed secrets or database connection strings: 'Starting deployment... Connecting to postgres://admin:Pa$$w0rd@db.prod.myapp.com/appdb... Build complete.'"},{"title":"Incident response text triage","prompt":"We had a potential data exposure incident — can you scan this text dump for any credentials or tokens that may have leaked: 'token=ghp_abcdefg1234567 api_key=AIzaSyD-9tSrke72I6kY'"}],"resultDescription":"Returns a JSON object indicating whether secrets were found (found: boolean), an array of leak objects each containing the type of secret (e.g. 'Database credentials') and the matched string, a confidence level ('high'/'medium'/'low'), warnings, a supported flag, and a data_as_of timestamp. Also includes an informational disclaimer.","failureModes":["Empty or missing text field returns validation error","Extremely long text may hit payload size limits","False positives on dummy/example credentials that match patterns","False negatives if secrets use unusual encoding or obfuscation","Payment failure (insufficient USDC balance) blocks the call","Non-JSON body type may cause parsing errors if schema mismatch"],"whenToPreferThis":"Choose this endpoint when you need a quick, pay-per-call secret scan without managing API keys or subscriptions — ideal for ad-hoc checks in agent workflows, CI/CD pipelines, or incident response. Best for scanning discrete text blocks (configs, logs, code snippets) rather than entire repositories. Prefer over heavyweight SAST tools when cost per scan and zero-setup are priorities.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:51:07.575Z","isFirstParty":false}