---
title: "Detect secrets"
method: POST
path: "/v1/detect-secrets"
---

# Detect secrets

`POST /v1/detect-secrets`

## Request

- Base URL: `https://api.scrubmytext.com`
- URL: `https://api.scrubmytext.com/v1/detect-secrets`
- Auth: one of:
  - none
  - HTTP bearer

Find likely credentials without echoing secret values. Includes a 3-call unauthenticated monthly trial per public IP. After the trial, use a subscription bearer key or x402 pay-per-call when enabled.

## Request body

- object
  - `text` string, required

## Response `200`

Successful result

## Other responses

- `400`: Invalid input
- `401`: API key required or invalid
- `402`: Trial exhausted / x402 Payment Required when pay-per-call is enabled
- `429`: Monthly usage limit reached

---

[API](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api.md) · [All operations](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api/revisions/54ace36baccf?raw)