{"uid":"cap_yVrDjS_LnDPEyvYjl9IuV","slug":"relayshield-nhi-exposure-scanner-9e8cbd24","name":"RelayShield NHI Exposure Scanner","description":"RelayShield Landing Site","url":"https://api.relayshield.net/v1/payg/nhi-exposure?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"Your own domain"},"vendor_domains":{"type":"array","items":{"type":"string"},"description":"Optional: vendor/supply-chain domains, up to 10"}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"found":false,"findings":[],"domains_checked":1,"highest_severity":null}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.4","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.4/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_yDYUelVd_1S71mqsmyPEc","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.4","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a domain for non-human identity (NHI) credential exposures such as leaked API keys, tokens, or service account secrets","exampleAgentPrompt":"Can you scan acmecorp.com for any exposed non-human identity credentials — things like leaked API keys, service account tokens, or machine secrets — and tell me what you find and how severe it is?","exampleUseCases":[{"title":"Pre-launch security credential audit","prompt":"Before we go live next week, can you scan our domain staging.myapp.io for any exposed API keys or service account tokens that might have leaked publicly?"},{"title":"Incident response credential check","prompt":"We just had a potential breach — can you immediately check if any non-human identity credentials for our domain api.techcorp.com are exposed, and tell me the highest severity finding?"},{"title":"Routine security posture review","prompt":"Can you run a weekly NHI exposure scan on our main domain platform.saasvendor.com and report back whether any machine credentials or tokens are visible externally?"}],"resultDescription":"Returns a JSON object indicating whether any NHI credential exposures were found (found: boolean), an array of findings with details, the number of domains checked, and the highest severity level among findings (null if none found).","failureModes":["Invalid or unresolvable domain returns an error or zero findings","Rate limiting may occur with repeated rapid calls to the same domain","Network timeouts if the target domain is slow to respond","False negatives possible if exposed credentials are not publicly indexed","Missing or malformed request body causes a 400-level error"],"whenToPreferThis":"Use this endpoint when you need to programmatically check whether a specific domain has publicly exposed non-human identity credentials such as API keys, tokens, or service account secrets. Prefer this over general vulnerability scanners when your focus is specifically on NHI/machine identity exposure rather than web application vulnerabilities, network misconfigurations, or human credential leaks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T06:40:33.330Z","isFirstParty":false,"canonicalSlug":"relayshield-nhi-exposure-scanner-9e8cbd24"}