# Halowerk Secret Scanner

> Halowerk Secret Scanner is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-13).

Scans text or source code for 20 types of secrets and credentials (AWS, GitHub, Slack, OpenAI, JWT, database URLs, etc.) and returns rule, severity, line, column, and redacted preview for each finding.

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/secret/scan
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-secret-scanner-a1c0b1f4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uUOwDt5ZYhlndBuUj0hYu

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-secret-scanner-a1c0b1f4 -d '<json body>'
```

Example prompt: Scan this code snippet for any leaked secrets or credentials — I want to know the rule name, severity, line and column of any finding, plus a redacted preview: [paste code here].

## When to prefer this

Choose this endpoint when you need fast, deterministic regex-plus-entropy scanning of text or source code for a broad set of 20 known secret patterns, especially when you require redacted output (secrets never fully returned) and structured per-finding metadata including line and column positions. Prefer it over generic LLM-based detection when you need rule-based precision and auditability.

## Known failure modes

- Empty or whitespace-only input returns no findings
- Very large payloads may be rejected or timeout
- Obfuscated or encoded secrets may evade pattern matching
- False positives possible for high-entropy strings that resemble secrets but are not
- Payment failure or insufficient USDC balance returns HTTP 402

## How this service works

Prueft Text oder Quelltext auf 20 Arten von Geheimnissen: AWS, GitHub, GitLab, Slack, Stripe, OpenAI, Anthropic, Google, SendGrid, Twilio, npm, private Schluesselbloecke, JWT, Zugangsdaten in URLs, Datenbankverbindungen und allgemeine Zuweisungen mit Entropiepruefung. Liefert Regel, Schwere, Zeile, Spalte und eine gekuerzte Vorschau. Fundwerte werden nie vollstaendig zurueckgegeben.

## Output

A list of findings, each containing: the matched rule name (e.g. 'aws-access-key', 'openai-api-key'), severity level, line number, column number, and a truncated/redacted preview of the matched value. Actual secret values are never returned in full.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "Text oder Quelltext"
  },
  "min_entropy": {
   "type": "number",
   "default": 3.2,
   "description": "Schwelle fuer allgemeine Zuweisungen"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-secret-scanner-a1c0b1f4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)