Sign in
Honeytokens

Bulk prefix lookup for honeytoken HMSL hashes

Accepts a list of 5-character HMSL hash prefixes and returns hints for matching honeytokens owned by the caller's account.

The response contains only SHA-256 hints of full HMSL hashes, not raw honeytoken values or metadata. Callers reconcile matches locally by computing hints from their own full hashes.

Requires the honeytokens:check scope, or honeytokens:read for backward compatibility. Tokens with honeytokens:write also work because that scope implicitly grants honeytokens:read.

post/v1/honeytokens/prefixes

Request body

prefixesstring[] required

List of 5-character lowercase hexadecimal HMSL hash prefixes. Maximum 500 prefixes per request.

Example request

{
  "prefixes": [
    "abcde",
    "12345"
  ]
}

Response

Matching honeytoken hints

Example response

{
  "matches": [
    {
      "hint": "6b8c7a2bca64845cd21f18f4756536e398a7765f003612db15b5b525bf564ebf"
    },
    {
      "hint": "9a3f8c1e2b4d5a6f7c8e9b0a1d2c3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d"
    }
  ]
}

Changes

Changed in 6 of the 7 revisions of this API.12

  • 93137300f7432See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed

  • 78197a8c12fd2See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed

  • 511b067cdcb12See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed

  • 0a06e9c0187a2See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed

  • adf5996579b92See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed

  • 288c9a3b277d2See the full diff
    • ○

      the security scope honeytokens:check was added to the endpoint's security scheme api-key

      api-security-scope-added

    • ○

      the security scope honeytokens:write was removed from the endpoint's security scheme api-key

      api-security-scope-removed