# DeFi Shield Secrets Scanner

> DeFi Shield Secrets Scanner is a paid API for AI agents from defi-shield-hazel.vercel.app, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Scans text or code for exposed secrets including AWS keys, GitHub tokens, Stripe keys, OpenAI keys, PEM keys, JWTs, database URIs, Slack tokens, Google credentials, Twilio keys, SendGrid keys, and passwords

## Facts

- Endpoint: POST https://defi-shield-hazel.vercel.app/api/dev/secrets-scan
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-shield-hazel-vercel-app-cce5a8f6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SCSx-HlnjMK_qML0QgJqo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-shield-hazel-vercel-app-cce5a8f6 -d '<json body>'
```

Example prompt: Scan this text for any exposed secrets or credentials — AWS keys, GitHub tokens, OpenAI keys, JWTs, database URIs, Stripe keys, Twilio tokens, PEM keys, or hardcoded passwords: 'AKIA1234ABCD5678EFGH sk-openai-abc123 postgres://admin:hunter2@db.example.com:5432/prod'

## When to prefer this

Use this endpoint when you need to detect a broad range of secret types in a single scan — especially when you need to cover AWS, GitHub, Stripe, OpenAI, PEM keys, JWTs, DB URIs, Slack, Google, Twilio, and SendGrid credentials simultaneously. Prefer this over manual regex checks or general-purpose code analysis tools when comprehensive multi-provider credential detection is needed in an automated or agentic workflow.

## Known failure modes

- Empty or missing input body returns a 400 error
- Very large payloads may time out or be truncated
- Obfuscated or encoded secrets may evade pattern matching
- False positives on test/placeholder values that resemble real credentials
- Payment failure or insufficient USDC balance returns a 402 error

## Output

Returns a list of detected secrets with their type (e.g. AWS_ACCESS_KEY, OPENAI_API_KEY, DB_URI), the matched pattern or redacted value, severity level, and optionally remediation recommendations for each finding. Returns an empty list if no secrets are detected.

## Example request

```json
{
 "input": {
  "body": {
   "code": "function connectDatabase() {\n  const dbUri = 'mongodb://user:password123@localhost:27017/myapp';\n  const apiKey = 'sk_test_1234567890abcdef';\n  return dbUri;\n}"
  },
  "type": "http",
  "method": "POST",
  "bodyType": "json"
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "bodyType",
    "body",
    "method"
   ],
   "properties": {
    "body": {
     "properties": {
      "code": {
       "type": "string",
       "description": "Code or text to scan for leaked secrets"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-shield-hazel-vercel-app-cce5a8f6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from defi-shield-hazel.vercel.app](https://www.zero.xyz/host/defi-shield-hazel.vercel.app/llms.txt)