# GlianaAI Secret Scan

> GlianaAI Secret Scan is a paid API for AI agents from api.glianalabs.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-18).

Scans for exposed secrets (API keys, credentials, tokens) in code or text using GlianaAI's pay-per-call tooling API

## Facts

- Endpoint: GET https://api.glianalabs.com/x402/tools/secret-scan?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-18
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/glianaai-secret-scan-9e80672b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_c1D-6Ww16HngMqyXLom72

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability glianaai-secret-scan-9e80672b
```

Example prompt: Can you scan this code snippet for any exposed API keys, passwords, or other secrets that might have been accidentally hardcoded?

## When to prefer this

Choose this endpoint when you need lightweight, pay-per-call secret scanning without signing up for a full-featured SAST platform. It is ideal for scanning individual snippets, files, or short text blocks on demand, especially in agentic workflows where you want to pay micro-amounts in USDC per scan rather than maintain a subscription.

## Known failure modes

- Missing or malformed 'input' body returns a 400 validation error
- Payment not received or insufficient USDC balance causes a 402 Payment Required response
- Empty or non-scannable input may return no findings rather than an error
- Rate limiting may occur on rapid repeated calls without prepaid balance
- Unsupported bodyType values cause schema validation failure

## How this service works

One endpoint for 90+ generative AI models, live market data, SEC filings and identity APIs — image, video, music, speech, LLM chat, crypto and FX rates, DEX liquidity, gas, US company fundamentals and insider trades, document OCR and face matching. Pay per request in USDC on Tempo, Base, Solana, Algorand or BNB Chain with no signup, or top up a prepaid balance in rupiah.

## Output

A JSON response indicating which secrets (if any) were detected in the input, including the type of secret and its location or context within the scanned content.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "properties": {}
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tool": "tools/secret-scan"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/glianaai-secret-scan-9e80672b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.glianalabs.com](https://www.zero.xyz/host/api.glianalabs.com/llms.txt)