Scan API keys, access tokens, private keys, passwords and credential leaks in co
Scan API keys, access tokens, private keys, passwords and credential leaks in code, config, logs, JSON or AI-agent tool output before commit, deploy, publish, send or external tool handoff. Deterministically verifies the result before settlement.
Not tested: has real-world effectsour last check, 2026-10-19
0 of 0checks answered this week
n/amedian answer time
$0.01listed price per call
n/aprice it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://humanmirror.fr/api/x402/secret-scanning/
| Category | Code and developer |
|---|---|
| Provider host | humanmirror.fr |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 0 from 0 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"input": "DATABASE_URL=postgres://example\\nAPI_TOKEN=example_test_token"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"criteria": {
"description": "Optional deterministic acceptance criteria; defaults to requiring a secret-free result.",
"type": "object"
},
"input": {
"description": "Text, source code, JSON, configuration, logs, tool output or other payload to scan for exposed API keys, access tokens, private keys, passwords and credential-like secrets."
},
"options": {
"description": "Optional scanner settings.",
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"additionalProperties": false,
"properties": {
"example": {
"type": "object"
},
"schema": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}