{"ok":true,"result":{"slug":"secret-scanner","name":"Secret Scanner","summary":"Scan text (code, config, logs, .env files) for leaked secrets such as AWS keys, GitHub and Stripe tokens, private keys, JWTs and passwords in URLs. Findings carry line, column, severity and a masked preview, never the raw secret.","description":"Paste logs, .env or config files to find leaked API keys, tokens, private keys and passwords, then copy a masked copy that is safe to share. Runs in your browser.","method":"POST","endpoint":"/api/v1/tools/secret-scanner","plan":"free","mcpName":"secret_scanner","input":{"type":"object","additionalProperties":false,"properties":{"input":{"type":"string","description":"The text to scan.","maxLength":200000},"includeLow":{"type":"boolean","description":"Include low-severity findings such as publishable keys and account IDs.","default":true},"masked":{"type":"boolean","description":"Also return the whole input with every secret replaced by its masked preview.","default":false}},"required":["input"]},"example":{"input":"AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE\nDATABASE_URL=postgres://app:Xk9#mQ2vLp7w@db.internal:5432/app\nDEBUG=false"},"randomOutput":false,"network":false,"docs":"https://pithlab.com/developers/tools/secret-scanner","page":"https://pithlab.com/tools/secret-scanner"}}