x402 pay-per-call

Find exposed LLM and AI provider API keys

Check whether a domain's LLM/AI provider API keys (OpenAI, Anthropic, Google, Groq, xAI, Replicate) appear exposed in criminal stealer logs. This is LLMjacking, a fast-growing threat where a leaked key becomes a live, uncapped billing liability rather than just a data exposure. Call to catch an exposed key before the drain, not after the invoice.

Billing. $0.40 in USDC per call over x402, on Base or Solana. No API key, no signup and no subscription. Send the request with no payment header, take the 402 challenge that comes back, pay it, and repeat the request. Only successful calls are charged.

post/v1/payg/llm-credential-exposure

Request

  • Base URL: https://api.relayshield.net
  • URL: https://api.relayshield.net/v1/payg/llm-credential-exposure
  • Auth: none required

Request body

domainstring

Your own domain

vendor_domainsstring[]

Optional: vendor/supply-chain domains, up to 10

Response

Payment settled and the check ran. ok is true and data holds the result.

oktrue required
dataobject required

Changes

No recorded changes to this operation across all 1 revision of this API.