{"uid":"cap_nyOyeELphj1nRUheWth6S","slug":"delx-secret-exposure-scan-c1609387","name":"Delx Secret Exposure Scan","description":"Detect likely credentials and private keys without returning their values. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates production reliability. Returns bounded machine-readable JSON for $0.002 USDC via x402 on Base. Execution is deterministic, first-party, local-only, stateless, and does not call an upstream provider; structured validation failures are not billed.","url":"https://api.delx.ai/api/v1/x402/secret-exposure-scan","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"text":{"type":"string","maxLength":500000}}},"responseSchema":{"type":"json","example":{"risk":"low","schema":"delx/secret-exposure-scan/v1","text_sha256":"2fb2835f6697091bb0ecb740d8691cd3d31407453033b2aafb19d203f0150ab0","finding_count":0,"finding_types":{},"values_returned":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_yI424vvP7GiMHlt4FVLVZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Detects likely credentials and private keys in text without revealing their values, returning bounded machine-readable JSON","exampleAgentPrompt":"Before we process this config blob from the user, scan it for any exposed secrets or private keys — I don't want leaked credentials making it into our pipeline.","exampleUseCases":[{"title":"Pre-flight check on untrusted webhook payload","prompt":"This webhook body just came in from an external source — scan it for any exposed API keys or private keys before we act on it."},{"title":"Guard against leaked secrets in user-submitted code","prompt":"A user just pasted this code snippet into our form — check it for hardcoded credentials or private keys before we store or execute it."},{"title":"Screen log output before forwarding to third party","prompt":"We're about to ship these application logs to our analytics partner — first scan them to make sure there are no secrets or tokens accidentally embedded in the output."}],"resultDescription":"A bounded machine-readable JSON object indicating whether likely credentials, private keys, or other secrets were detected in the submitted text, without returning the actual secret values. Results include detection flags and metadata about the type and location of potential exposures.","failureModes":["Text exceeds 500,000 character maxLength limit — request rejected with a structured validation error (not billed)","Malformed JSON request body — returns structured validation failure (not billed)","Insufficient USDC balance or x402 payment failure — request not processed","Network timeout or transient service unavailability"],"whenToPreferThis":"Choose this endpoint when you need a fast, stateless, deterministic pre-flight check for credential or secret leakage before an autonomous agent acts on untrusted input, processes user-submitted text, or forwards data to a downstream system. It is ideal for agentic pipelines that must avoid propagating leaked API keys, private keys, or passwords without needing to see the actual secret values. Since it is local-only and calls no upstream provider, it is safe for sensitive data handling.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T19:02:24.676Z","isFirstParty":false}