{"uid":"cap_z6YssRBLO9TCgrkNOv5WT","slug":"dcl-trust-oracle-secrets-scanner-1a0c3253","name":"DCL Trust Oracle – Secrets Scanner","description":"Scan text for exposed credentials, API keys, private keys, database URLs, and webhook secrets. COMMIT when nothing matches. NO_COMMIT on any finding. POST JSON {\"response\",\"agent_id\"}.","url":"https://bazaar.fronesislabs.com/evaluate/secrets?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"agent_id":{"type":"string","description":"Caller id stored on the audit record. Omitted values are stored as unknown."},"response":{"type":"string","minLength":1,"description":"Text to scan. Raw content is not stored."},"task_type":{"type":"string","description":"Optional task tag stored on the audit record. Defaults to unknown."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xJHi_XEOhD4i0zMEQwBoi","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a text string for exposed credentials, API keys, private keys, database URLs, and webhook secrets, returning a COMMIT verdict when clean or NO_COMMIT when a finding is detected.","exampleAgentPrompt":"Before you send that response, run it through the DCL Trust Oracle secrets scanner to make sure it doesn't contain any exposed API keys, private keys, database URLs, or webhook secrets — use my agent ID 'agent-42' so it gets logged correctly.","exampleUseCases":[{"title":"Pre-send credential leak check","prompt":"Before my agent posts that generated code snippet to the user, scan it for any accidentally included API keys, private keys, or database connection strings — flag it as NO_COMMIT if anything sensitive is found, using agent ID 'code-gen-bot'."},{"title":"CI pipeline secret guard","prompt":"Scan this deployment config text for exposed credentials or webhook secrets before it gets committed — if anything looks like a secret, I need a NO_COMMIT verdict right away; agent ID is 'ci-pipeline-agent'."},{"title":"LLM output audit for secret leakage","prompt":"I need you to check the last response my customer-facing agent generated for any leaked API keys or private keys — use agent ID 'customer-agent-01' and tag the task as 'output-audit' so it shows up in the audit trail."}],"resultDescription":"Returns a verdict of COMMIT (no secrets found) or NO_COMMIT (one or more secrets detected), along with finding details describing what was matched. An audit record is stored on the audit chain linking the result to the provided agent_id and optional task_type.","failureModes":["Empty or missing 'response' field returns a validation error","Malformed JSON body returns 400","Payment not included or insufficient funds returns 402","Very large text payloads may time out or be truncated","False positives on high-entropy strings that resemble keys but are not"],"whenToPreferThis":"Choose this endpoint when you need to scan a single block of text for secrets, credentials, private keys, database URLs, or webhook tokens before an agent takes an irreversible action such as sending a message, committing code, or calling an external service. Prefer it over generic content moderation endpoints when the specific concern is credential or secret leakage rather than toxicity, PII, or quality issues.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T06:46:21.773Z","isFirstParty":false,"canonicalSlug":"dcl-trust-oracle-secrets-scanner-1a0c3253"}