# ShareScan Pre-Share Leak Checker

> ShareScan Pre-Share Leak Checker is a paid API for AI agents from well-011-sharescan.rainmaker-wells.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-22).

Scans text or a remote text URL for sensitive data leaks — custom terms, hashed term lists, emails, API keys, JWTs, private keys, IPs, and coordinates — returning JSON hits with line numbers.

## Facts

- Endpoint: POST https://well-011-sharescan.rainmaker-wells.workers.dev/api/sharescan?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sharescan-pre-share-leak-checker-164706db
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0HAGzRX40bUUKTJTfRoOT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sharescan-pre-share-leak-checker-164706db -d '<json body>'
```

Example prompt: Before I share this config file, scan it for any leaked secrets — check for AWS keys, GitHub tokens, Slack tokens, JWTs, private keys, emails, and also flag if it contains any of these terms: 'acme-internal', 'project-falcon'. Here's the text: [paste text].

## When to prefer this

Choose this endpoint when you need a lightweight, stateless pre-share leak scan with no data retention — ideal for agents that must verify content before publication, sharing, or distribution. It combines custom term matching (plain or privacy-preserving salted-hash lists) with broad pattern detectors in a single call. Prefer it over general-purpose LLM-based review when you need deterministic pattern matching at line-number precision and a clear privacy guarantee that nothing is stored.

## Known failure modes

- HTTP URLs, file://, data://, localhost, or private IP URLs are rejected with an error
- Text exceeding 10 MB is rejected
- Binary resource URLs are listed as unscanned rather than analyzed
- Custom terms list exceeding 2000 entries or hashed list exceeding 5000 hashes may be rejected
- Payment of $0.005 USDC via x402 required; missing or failed payment returns a 402 error
- Malformed hashed term object (missing salt, max_words, or hashes fields) will cause an error

## How this service works

Pre-share leak check ($0.005 USDC via x402). Scan text or an https text URL for your own terms (plain list, or salted-hash list sent per call, never stored) plus leak-shaped strings: emails, coordinates, IPs, AWS/GitHub/Slack/sk- keys, private keys, JWTs. Binary URLs are listed as unscanned. Max 10 MB, https only. Returns JSON hits with line numbers. A clean scan is not a clearance. Provided as is, with no warranty or guarantee of accuracy or fitness. Nothing is stored.

## Output

A JSON object listing all detected hits, each with the matched pattern type (e.g. email, AWS key, JWT, custom term), the matched value or hash match indicator, and the line number where it was found. Binary URLs are listed as unscanned. A clean result means no hits were found but does not constitute a security clearance.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "https URL of a text resource. http/file/data/localhost/private IPs rejected."
  },
  "text": {
   "type": "string",
   "description": "Text to scan (max 10 MB). Use this or url."
  },
  "terms": {
   "type": "array",
   "description": "Plain terms to keep out (max 2000)."
  },
  "hashed": {
   "type": "object",
   "description": "Salted-hash term list {salt, max_words, hashes[]} (max 5000 hashes)."
  },
  "detectors": {
   "type": "boolean",
   "description": "Leak-shaped string detectors; default true."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "additionalProperties": true
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sharescan-pre-share-leak-checker-164706db/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from well-011-sharescan.rainmaker-wells.workers.dev](https://www.zero.xyz/host/well-011-sharescan.rainmaker-wells.workers.dev/llms.txt)