Heuristic scan of pasted env/config/log text for API keys, tokens, PEM keys, and JWTs — not a breach database.
- Free
- No signup
- Fast
- Privacy-friendly
Free · API · MCPToolYour platform
Use Secret Leak Scanner three ways
The free Secret Leak Scanner on this page works in your browser. The same workflow is available via REST API for apps and via MCP for Cursor, Claude, and other agents — one API key, one plan, one quota. This tool is part of the security-apis module under Security Tools.
- Free in browserUse Secret Leak Scanner here — no account required.
- REST APICall from your server with
X-Api-Key. - MCP for agentsConnect Cursor or Claude to ToolYour MCP with the same key.
- 1. Get an API keySign in and open Dashboard → API Keys (works for REST and MCP).
- 2. Call or connectUse the REST API from your server, or paste the MCP URL into your agent config.
- 3. Same qualityOutput matches the free web tool across all three surfaces.
What is Secret Leak Scanner?
Paste env files, config snippets, or logs to flag common secret patterns (AWS keys, GitHub PATs, Stripe keys, PEM private keys, JWTs, and secret-like assignments). Matches are redacted in the preview. This is pattern matching only — not Have I Been Pwned or entropy oracles. Prefer AI PII Scrubber before pasting production logs into agents. REST/MCP: /api/v1/security-apis/secret-leak-scanner.
What are common questions about Secret Leak Scanner?
What does Secret Leak Scanner do?
Heuristic scan of pasted env/config/log text for API keys, tokens, PEM keys, and JWTs — not a breach database.
Is this available via API and MCP?
Yes. Same route under /api/v1/security-apis/{slug} with one ToolYour API key and shared credits.
What are the key features of Secret Leak Scanner?
Browser + API
Run in the browser or via REST/MCP.
Structured report
JSON-friendly output for agents and dashboards.
How do you use Secret Leak Scanner?
Open the tool
Use the Security Tools category page.
Provide input
URL, domain, or pasted text as required.
Review findings
Fix high-severity items first.
Where do you browse more security tools tools?
- Security Tools tools
Browse the full Security Tools category on ToolYour.
- AI Tools tools
PII scrub, resume match, transcription, video summarize, and YouTube analysis. Free in the browser; API-backed
- File Converter tools
Convert PDF↔Word, compress images, and change formats online. Free in browser · REST · MCP. No signup for typi
Related tools
security tools
Subresource Integrity Checker
Parse a page for script/link tags and report missing integrity attributes on third-party assets.
Freesecurity tools
Security.txt Checker
Discover and parse RFC 9116 security.txt (/.well-known/security.txt) including Contact and Expires.
Freesecurity tools
Bcrypt Hash Generator
Generate a bcrypt password hash with configurable cost factor for local auth testing.
Freesecurity tools
HMAC Generator
Compute HMAC digests (SHA-1/256/384/512) for a message and shared secret — hex and base64.
Freesecurity tools
DNS Lookup
Resolve A, AAAA, MX, TXT, NS, and CNAME records for a domain from the API host.
Freesecurity tools
HTTP Security Redirect Checker
Inspect redirect hop hygiene: HTTP→HTTPS upgrade, loops, long chains, and open-redirect-looking query params.
Freesecurity tools
CORS Policy Checker
Fetch a URL with a probe Origin and report Access-Control-Allow-* gaps, wildcards, and Origin reflection.
Freesecurity tools
SPF / DKIM / DMARC Checker
Look up SPF, common DKIM selectors, and DMARC TXT records for a domain or URL hostname.
Freesecurity tools
Hash Generator
Compute MD5, SHA-1, SHA-256/384/512, or SHA-3 digests of text in one place — with legacy warnings for MD5/SHA-1.
Freesecurity tools
Secure Password Generator
Generate a cryptographically random password with configurable length and character sets.
Freesecurity tools
Password Strength Checker
Estimate password strength from length, charset mix, entropy heuristics, and a short common-password list.
Freesecurity tools
JWT Decoder
Decode JWT header and payload with weak-algorithm and expiry warnings — signature is not verified.
Free
Popular in Security Tools
security tools
Subresource Integrity Checker
Parse a page for script/link tags and report missing integrity attributes on third-party assets.
Freesecurity tools
Security.txt Checker
Discover and parse RFC 9116 security.txt (/.well-known/security.txt) including Contact and Expires.
Freesecurity tools
Bcrypt Hash Generator
Generate a bcrypt password hash with configurable cost factor for local auth testing.
Freesecurity tools
HMAC Generator
Compute HMAC digests (SHA-1/256/384/512) for a message and shared secret — hex and base64.
Freesecurity tools
DNS Lookup
Resolve A, AAAA, MX, TXT, NS, and CNAME records for a domain from the API host.
Freesecurity tools
HTTP Security Redirect Checker
Inspect redirect hop hygiene: HTTP→HTTPS upgrade, loops, long chains, and open-redirect-looking query params.
Freesecurity tools
CORS Policy Checker
Fetch a URL with a probe Origin and report Access-Control-Allow-* gaps, wildcards, and Origin reflection.
Free