# RelayShield Secret Scan

> RelayShield Secret Scan is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.35/call, status unknown (last checked 2026-10-11).

Scans a domain or text payload for exposed secrets, credentials, or sensitive data leaks and returns findings with severity ratings

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/secret-scan?utm_source=zero.xyz
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-secret-scan-e1f557d2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-_moDxDIkFbhxKnR0J5Pe

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-secret-scan-e1f557d2 -d '<json body>'
```

Example prompt: Can you scan api.mycompany.com for any exposed secrets or leaked credentials and tell me if anything sensitive is publicly visible?

## When to prefer this

Use this endpoint when you need to programmatically check a domain for exposed secrets, API keys, tokens, or credentials as part of a security audit, CI/CD pipeline gate, or vendor assessment workflow. Prefer RelayShield when you want a pay-per-scan model with no subscription and need structured JSON findings including severity ratings.

## Known failure modes

- Invalid or unreachable domain returns error or empty findings
- Malformed request body causes 400 bad request
- Payment not attached or insufficient results in 402 payment required
- Rate limiting may return 429 if too many scans submitted rapidly
- Private or firewall-protected endpoints may not be scannable, returning no findings even if secrets exist

## How this service works

RelayShield Landing Site

## Output

Returns a JSON object indicating whether secrets were found (found boolean), a list of findings with details, the number of domains checked, and the highest severity level among findings (or null if none found).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Your own domain"
  },
  "vendor_domains": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Optional: vendor domains, up to 5"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "found": false,
   "findings": [],
   "domains_checked": 1,
   "highest_severity": null
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-secret-scan-e1f557d2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)