x402 census · scan.openverbs.com · ded086445292 · JSON
POST /v1/secrets
unprobed
Scan source code or configuration text for hardcoded secrets: AWS access keys, GitHub/Slack/Google tokens, Stripe and OpenAI keys, PEM private-key blocks, JWTs and high-entropy secret assignments. Placeholder values are filtered out. Each finding gives the rule, a severity (critical/high/medium/low), line and column, entropy and a masked excerpt. Offline and deterministic.
Verdict: not verified by an unpaid GET. not probed yet. This says nothing about whether the route works when called as declared.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://scan.openverbs.com/v1/secrets |
| Method | POST |
| Price | $0.004 USDC = 4000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base) |
| payTo | 0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A |
| Seller | scan.openverbs.com |
| Catalogs | cdp (row updated 2026-09-24) |
| Listed since (lower bound) | 2026-09-24 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-09-24 |
| CDP quality counters | 4 calls and 2 unique payers in 30 days, last call 2026-09-24 (catalog-reported, not verified on chain) |
| Category (keyword rule) | inference/llm |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | Scan text for leaked secrets · scan for secrets, detect leaked credentials, api key scanner, find hardcoded tokens, secret leak detection |
Unpaid probe (census of )
| Field | Value |
|---|---|
| Probe | not probed in this build |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Distinct payers | 5 |
| Payments | 197 |
| USDC volume | $1.35 |
| Median payment | $0.01 |
| First / last payment | 2026-09-09 / 2026-09-30 |
| Sampler-shaped share of payments | 100.0% |
| Payers that are not samplers | 0 |
| Source | forensics-2026-09-30 |
| Address | 0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A |
Declared input and output (extensions.bazaar)
{
"input": {
"body": {
"content": "example"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
}
Try it (unpaid: shows the 402)
curl -si -X POST 'https://scan.openverbs.com/v1/secrets' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'
The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/ded086445292/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"ded086445292"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on scan.openverbs.com.