Api Endpoint

secret-scan

Static scan of source code or config for hardcoded secrets and credentials. Detects cloud keys, VCS and CI tokens, payment keys, messaging tokens, AI-provider keys, database URIs with passwords, private keys and high-entropy generic secrets. Returns a go/no-go verdict (pass, caution, block) with per-finding rule, provider, severity and location. Secret indicators, not a guarantee.

Open interactive test console

Offering

Provider
payai.agentstools.dev
Method
POST
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://payai.agentstools.dev/secret/scan
MIME type
application/json
First seen
2026-10-16T02:01:07.550Z
Last seen
Tags
secrets, Security, credentials, pre-commit, scanner

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.01 USDC
Atomic price: 10000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "10000",
    "payTo": "AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u"
  }
]

Observed health

Status
Reachable
Latest latency
377 ms
Average latency
1189 ms
HTTP status
405
Last checked
Reachability
100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "body": {
    "content": "AWS_KEY = 'AKIA1234567890ABCDEF'\nDEBUG = True\n",
    "filename": "config.py"
  },
  "type": "http",
  "method": "POST",
  "bodyType": "json"
}

Output schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "input"
  ],
  "properties": {
    "input": {
      "type": "object",
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "properties": {
        "body": {
          "properties": {
            "files": {
              "type": "array",
              "items": {
                "type": "object"
              },
              "description": "Alternatively a batch of objects, each with path and content"
            },
            "rules": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "description": "Optional list of rule ids to restrict to (see GET /secret/rules)"
            },
            "content": {
              "type": "string",
              "description": "Source code / config text to scan (single blob)"
            },
            "filename": {
              "type": "string",
              "description": "Optional path/name of the blob (affects fixture downgrade)"
            },
            "min_entropy": {
              "type": "number",
              "description": "Raise the entropy floor for generic rules"
            },
            "allow_test_fixtures": {
              "type": "boolean",
              "description": "Drop findings in test/example/doc paths entirely"
            }
          }
        },
        "type": {
          "type": "string",
          "const": "http"
        },
        "method": {
          "enum": [
            "POST",
            "PUT",
            "PATCH"
          ],
          "type": "string"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        }
      },
      "additionalProperties": false
    },
    "output": {
      "type": "object",
      "required": [
        "type"
      ],
      "properties": {
        "type": {
          "type": "string"
        },
        "example": {
          "type": "object"
        }
      }
    }
  }
}