# x402 Secret Scanner – Text Redaction

> x402 Secret Scanner – Text Redaction is a paid API for AI agents from x402-hono-api.inraby.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Scans submitted text for exposed secrets (API keys, tokens, credentials) and returns redacted output with matches identified but values hidden.

## Facts

- Endpoint: POST https://x402-hono-api.inraby.workers.dev/api/v1/secret-scan
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-secret-scanner-text-redaction-a427a023
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap___3coFrrq-f323I4ed-oX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-secret-scanner-text-redaction-a427a023 -d '<json body>'
```

Example prompt: Scan this text for any exposed secrets or API keys and give me back a redacted version with the actual values hidden: 'GITHUB_TOKEN=ghp_abc123xyz STRIPE_KEY=sk_live_9876abcd AWS_SECRET=wJalrXUtnFEMI/K7MDENG'

## When to prefer this

Choose this endpoint when you need to sanitize or audit arbitrary text blobs, logs, config dumps, or code snippets for accidentally exposed credentials before sharing or storing them. Prefer this over general-purpose LLM prompting for secret detection because it is purpose-built, consistent, and returns structured redacted output without risk of the secret values being echoed back in a response.

## Known failure modes

- Empty or missing 'text' field returns a 400 validation error
- Extremely large text payloads may be rejected or truncated
- Payment failure via x402 returns 402 Payment Required before processing
- False positives: high-entropy strings that look like secrets may be flagged
- False negatives: novel or obfuscated secret formats may not be detected

## How this service works

Secret scan for exposed API keys, tokens, passwords, and credentials in text — returns redacted output without exposing matched secret values. Ideal for agent pre-flight checks before sharing config or logs.

## Output

Returns redacted output text where secret values are masked or replaced, along with metadata about what types of secrets were found (e.g. AWS keys, GitHub tokens, Stripe keys), without exposing the actual matched secret values.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "Text to scan for exposed secrets and credentials"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-secret-scanner-text-redaction-a427a023/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-hono-api.inraby.workers.dev](https://www.zero.xyz/host/x402-hono-api.inraby.workers.dev/llms.txt)