Secret Scan
Find credentials left in a block of text. Use before an agent commits code, pastes a log into a ticket, or acts on a file it did not write.
Call it
The first response is 402 with the exact price and every rail you can
pay with. Pay, repeat the request with the proof, and you get the result.
curl -X POST https://api.glianalabs.com/v1/tools/secret-scan \
-H 'content-type: application/json' \
-d '{"text":"const client = new Client({ apiKey: \"sk-ant-api03-EXAMPLEEXAMPLEEXAMPLEEXAMPLE\" });"}'When to use it
Inputs: text (required, up to 200,000 characters). Returns findings[] with kind (aws_access_key_id, github_pat, anthropic_api_key, openai_api_key, stripe_secret_key, google_api_key, slack_token, private_key_block, jwt and more), severity, the line number, and the match REDACTED to its first and last four characters - the full value is never returned, because echoing it would put a second copy of the leak in every log between here and you. Also flags high-entropy values assigned to secret-looking names, at lower confidence. Matches are shapes, not proof: a key in a test fixture looks exactly like a live one.
What it costs
$0.0020 per successful call — flat, with no plan, minimum or monthly fee. A call that fails validation is refused before it runs, so it is never charged.
Not sure this is the right endpoint? GET /v1/consult?intent=… is
free and answers that.