# Delx Secret Exposure Scan

> Delx Secret Exposure Scan is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-16).

Detects likely credentials and private keys in text without revealing their values, returning bounded machine-readable JSON

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/secret-exposure-scan
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-secret-exposure-scan-c1609387
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nyOyeELphj1nRUheWth6S

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-secret-exposure-scan-c1609387 -d '<json body>'
```

Example prompt: Before we process this config blob from the user, scan it for any exposed secrets or private keys — I don't want leaked credentials making it into our pipeline.

## When to prefer this

Choose this endpoint when you need a fast, stateless, deterministic pre-flight check for credential or secret leakage before an autonomous agent acts on untrusted input, processes user-submitted text, or forwards data to a downstream system. It is ideal for agentic pipelines that must avoid propagating leaked API keys, private keys, or passwords without needing to see the actual secret values. Since it is local-only and calls no upstream provider, it is safe for sensitive data handling.

## Known failure modes

- Text exceeds 500,000 character maxLength limit — request rejected with a structured validation error (not billed)
- Malformed JSON request body — returns structured validation failure (not billed)
- Insufficient USDC balance or x402 payment failure — request not processed
- Network timeout or transient service unavailability

## How this service works

Detect likely credentials and private keys without returning their values. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates production reliability. Returns bounded machine-readable JSON for $0.002 USDC via x402 on Base. Execution is deterministic, first-party, local-only, stateless, and does not call an upstream provider; structured validation failures are not billed.

## Output

A bounded machine-readable JSON object indicating whether likely credentials, private keys, or other secrets were detected in the submitted text, without returning the actual secret values. Results include detection flags and metadata about the type and location of potential exposures.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "maxLength": 500000
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "low",
  "schema": "delx/secret-exposure-scan/v1",
  "text_sha256": "2fb2835f6697091bb0ecb740d8691cd3d31407453033b2aafb19d203f0150ab0",
  "finding_count": 0,
  "finding_types": {},
  "values_returned": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-secret-exposure-scan-c1609387/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)