secret-scan
Static scan of source code or config for hardcoded secrets and credentials. Detects cloud keys, VCS and CI tokens, payment keys, messaging tokens, AI-provider keys, database URIs with passwords, private keys and high-entropy generic secrets. Returns a go/no-go verdict (pass, caution, block) with per-finding rule, provider, severity and location. Secret indicators, not a guarantee.
Offering
- Provider
- payai.agentstools.dev
- Method
- POST
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://payai.agentstools.dev/secret/scan- MIME type
- application/json
- First seen
- 2026-10-16T02:01:07.550Z
- Last seen
- Tags
- secrets, Security, credentials, pre-commit, scanner
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.01 USDC
Atomic price: 10000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "10000",
"payTo": "AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u"
}
]Observed health
- Status
- Reachable
- Latest latency
- 377 ms
- Average latency
- 1189 ms
- HTTP status
- 405
- Last checked
- Reachability
- 100% over 14 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"body": {
"content": "AWS_KEY = 'AKIA1234567890ABCDEF'\nDEBUG = True\n",
"filename": "config.py"
},
"type": "http",
"method": "POST",
"bodyType": "json"
}Output schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"properties": {
"files": {
"type": "array",
"items": {
"type": "object"
},
"description": "Alternatively a batch of objects, each with path and content"
},
"rules": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of rule ids to restrict to (see GET /secret/rules)"
},
"content": {
"type": "string",
"description": "Source code / config text to scan (single blob)"
},
"filename": {
"type": "string",
"description": "Optional path/name of the blob (affects fixture downgrade)"
},
"min_entropy": {
"type": "number",
"description": "Raise the entropy floor for generic rules"
},
"allow_test_fixtures": {
"type": "boolean",
"description": "Drop findings in test/example/doc paths entirely"
}
}
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}