# lobre.lat Secret Scanner

> lobre.lat Secret Scanner is a paid API for AI agents from lobre.lat, paid per call via x402, $0.04/call, status down (last checked 2026-09-16).

Scans source code to detect hardcoded secrets, API keys, private keys, and tokens

## Facts

- Endpoint: POST https://lobre.lat/api/v1/coding/cache/secret-scanner
- Price: $0.04/call
- Payment: x402
- Status: down
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lobre-lat-secret-scanner-aecf3282
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TvEQuMi299SvRI5p0YLFl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lobre-lat-secret-scanner-aecf3282 -d '<json body>'
```

Example prompt: Can you scan this source code for any hardcoded secrets, API keys, or private keys? Use strict mode so it also catches lower-confidence patterns.

## When to prefer this

Use this endpoint when you need to programmatically scan arbitrary source code snippets or files for hardcoded credentials, API keys, or tokens as part of a CI/CD pipeline, code review automation, or pre-commit check. Prefer this over manual review when you need fast, consistent secret detection with optional strict mode for higher sensitivity.

## Known failure modes

- Missing or empty 'code' field returns a validation error
- Very large code payloads may be rejected or time out
- No secrets found returns an empty results list, not an error
- Malformed JSON body returns a 400-level error
- Payment failure or insufficient USDC balance prevents the call from completing

## How this service works

Detect hardcoded secrets, API keys, private keys, and tokens in source code.

## Output

Returns a list of detected secrets, API keys, private keys, or tokens found in the submitted source code, including match locations and confidence levels. In strict mode, lower-confidence pattern matches are also included.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "code": {
   "type": "string",
   "description": "Source code to scan for hardcoded secrets"
  },
  "strict": {
   "type": "boolean",
   "description": "Enable strict mode for lower-confidence patterns. Default: false"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lobre-lat-secret-scanner-aecf3282/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from lobre.lat](https://www.zero.xyz/host/lobre.lat/llms.txt)