# ShareScan Pre-Share Leak Checker

> ShareScan Pre-Share Leak Checker is a paid API for AI agents from well-011-sharescan.rainmaker-wells.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-22).

Scans text or a URL for sensitive data leaks (credentials, PII, custom terms) before sharing, returning JSON hits with line numbers for $0.005 USDC per call.

## Facts

- Endpoint: POST https://well-011-sharescan.rainmaker-wells.workers.dev/mcp?utm_source=zero.xyz#sharescan#sharescan
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sharescan-pre-share-leak-checker-10274353
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_k_aAnUFfDumbnSepLe7p5

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sharescan-pre-share-leak-checker-10274353 -d '<json body>'
```

Example prompt: Before I share this document with the team, scan it for any leaked credentials, API keys, emails, or private keys — I also want you to flag any of these custom terms: 'ProjectNova', 'internal-db-prod'. Here's the text: [paste content here].

## When to prefer this

Use this endpoint when you need a lightweight, per-call privacy and secrets scan before sharing text content or a text URL — especially when you want to check for both standard leak patterns (AWS/GitHub/Slack keys, JWTs, emails, IPs, coordinates, private keys) AND your own custom or salted-hash proprietary terms in a single call. Prefer it over static analysis tools when you need a pay-per-use, zero-storage model where your custom terms are never persisted server-side.

## Known failure modes

- Content exceeds 10 MB limit — returns error, reduce input size
- Non-HTTPS URL provided — endpoint only accepts https:// URLs, HTTP URLs are rejected
- Binary file URL provided — listed as unscanned rather than failing, but no content analysis performed
- Payment failure — $0.005 USDC x402 payment not completed, request is rejected
- Malformed custom term list — invalid format may cause terms to be skipped or error
- Rate limiting or worker timeout for very large text payloads near the 10 MB ceiling

## How this service works

Pre-share leak check ($0.005 USDC via x402). Scan text or an https text URL for your own terms (plain list, or salted-hash list sent per call, never stored) plus leak-shaped strings: emails, coordinates, IPs, AWS/GitHub/Slack/sk- keys, private keys, JWTs. Binary URLs are listed as unscanned. Max 10 MB, https only. Returns JSON hits with line numbers. A clean scan is not a clearance.

## Output

A JSON object listing all detected hits, each with the matched pattern type (e.g. email, AWS key, JWT, custom term), the matched value or a masked version, and the line number where it was found. Binary URLs are listed as unscanned. A clean result means no hits were found but does not constitute a security clearance.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sharescan-pre-share-leak-checker-10274353/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from well-011-sharescan.rainmaker-wells.workers.dev](https://www.zero.xyz/host/well-011-sharescan.rainmaker-wells.workers.dev/llms.txt)