Secrets Leak Scanner API
SecretSentry is a secrets detection API that scans text, source code, configuration files, logs, and ZIP archives for leaked credentials. It detects over 50 secret types including AWS keys, GCP service accounts, Stripe keys, GitHub tokens, Slack webhooks, JWTs, database connection strings, private keys, and more. The API uses an in-house rule engine combining regex-based pattern matching,…
Secrets Leak Scanner API endpoints
| Method | Endpoint | Description |
|---|---|---|
| Status | ||
| GET |
getHealth /health |
Returns service status, version, and current timestamp. No authentication required. |
| Scan | ||
| POST |
scanDiff /scan-diff |
Compares two versions of content and identifies secrets that were added, removed, or unchanged. |
| POST |
scanText /scan-text |
Accepts a plain-text string and scans it for leaked secrets such as API keys, tokens, and credentials. |
| POST |
scanFile /scan-file |
Accepts a filename and its content, then scans for leaked secrets with file-context awareness. |
| POST |
scanUrls /scan-urls |
Fetches content from provided URLs and scans each for leaked secrets. |
| POST |
scanArchive /scan-archive |
Accepts a base64-encoded zip archive, extracts it, and scans all files for leaked secrets. |
| Rules | ||
| GET |
listRules /rules |
Returns every detection rule supported by SecretSentry, including rule ID, type, description, default severity, and confidence. |
| POST |
testRules /rules-test |
Runs a scan against the provided text using the specified ruleset without persisting results. Useful for testing custom configurations. |
| History | ||
| GET |
listScans /scans |
Returns a paginated list of your most recent scans, ordered newest first. |
| GET |
getScanById /scan-by-id |
Retrieves full details and all findings for a previously executed scan by its ID. |
Secrets Leak Scanner API pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $29 / month | — |
|
| ULTRA | $149 / month | — |
|
| MEGA | $499 / month | — |
|