---
title: "Bulk prefix lookup for honeytoken HMSL hashes"
method: POST
path: "/v1/honeytokens/prefixes"
tags: ["Honeytokens"]
---

# Bulk prefix lookup for honeytoken HMSL hashes

`POST /v1/honeytokens/prefixes`

Accepts a list of 5-character HMSL hash prefixes and returns hints
for matching honeytokens owned by the caller's account.

The response contains only SHA-256 hints of full HMSL hashes, not raw
honeytoken values or metadata. Callers reconcile matches locally by
computing hints from their own full hashes.

Requires the `honeytokens:check` scope, or `honeytokens:read`
for backward compatibility. Tokens with `honeytokens:write` also work
because that scope implicitly grants `honeytokens:read`.

## Request body

- object
  - `prefixes` string[], required — List of 5-character lowercase hexadecimal HMSL hash prefixes. Maximum 500 prefixes per request.

## Response `200`

Matching honeytoken hints

- object
  - `matches` object[]
    - `hint` string — SHA-256 hex digest of the full HMSL hash

## Other responses

- `400` — Invalid request (bad prefix format or too many prefixes)
- `401` — Invalid API key
- `403` — Forbidden

## Changes

- **2026-08-28** `93137300f743` — 2 info
  - the security scope `honeytokens:check` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-08-26** `78197a8c12fd` — 2 info
  - the security scope `honeytokens:check` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-08-20** `511b067cdcb1` — 2 info
  - the security scope `honeytokens:check` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-08-14** `0a06e9c0187a` — 2 info
  - the security scope `honeytokens:check` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-08-13** `adf5996579b9` — 2 info
  - the security scope `honeytokens:check` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`

[Full history](https://skmtc.dev/gitguardian/apis/gitguardian-api/changes/v1/honeytokens/prefixes/post.md)

---

[API](https://skmtc.dev/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.dev/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/93137300f743/schema)