Scan a login page to find secrets, emails, API keys, and embedded URLs.
See the last few guest scans:
visuhealth.zeiss.co.in
www.art.com
www.dev.art.com
mite.ac.in
robinhood.com
Scans JavaScript files for secrets, emails, API keys, IP addresses, and embedded URLs.
Identifies API keys, tokens, and credentials from over 50 popular services.
Identifies all external URLs and endpoints embedded in scripts and HTML.
Perform quick security audits on login pages to identify exposed credentials, endpoints, emails, or ip addresses.
Evaluate third-party applications and services for exposed secrets, emails, or ip addresses.
Identify external services and APIs that a login page connects to by viewing all external URLs.
Each scan costs 1 credit. Purchase credit packages starting at €5.00.
Credits never expire and can be used whenever you need them.
Sign up to purchase creditsNeed a custom enterprise plan? Contact us at [email protected]
All API requests require your API key (available after signing up).
Each scan consumes 1 credit from your account.
curl -X POST "https://secrets.tools/api/scan" \
-H "Content-Type: application/json" \
-H "X-API-KEY: YOUR_API_KEY" \
-d '{"url": "https://example.com/login"}'{
"created_at": "Wed, 19 Mar 2025 15:29:20 GMT",
"result": {
"emails": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"ip_addresses": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"192.168.1.1",
"10.0.0.5",
"172.16.254.1",
"123.45.67.89"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"secrets": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
{
"type": "generic api key",
"value": [
"\"apikey\":\"development\"",
"apikey",
"development"
]
},
{
"type": "openai api key",
"value": "sk-aBcDeFgH1J2k3L4mN5pQ6rStUvWxYz7"
}
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"urls": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"http://www.w3.org/1999/xhtml",
"https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap",
"https://example.com/contact/",
"https://api.example.com",
"https://analytics.example.com",
"https://[email protected]/450686966138",
"https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview",
"http://www.w3.org/2000/svg",
"https://example.com/terms/",
"https://example.com/privacy/",
"https://www.linkedin.com/company/example-com/",
"https://cdn.example.com/image/upload/v1687682832",
"https://api.openai.com/v1/chat/completions",
"https://example.com/demo.mp4",
"https://github.com/example/repo"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": [
"https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE",
"https://github.com/systemjs/systemjs/blob/main/docs/errors.md#3"
]
}
},
"scan_id": "9b72e384f5c6a7b1d220e8a7c69f",
"url": "https://example.com"
}curl -X GET "https://secrets.tools/api/scan/9b72e384f5c946a7b1d22053e8a7c69f" \
-H "X-API-KEY: YOUR_API_KEY"{
"created_at": "Wed, 19 Mar 2025 15:29:20 GMT",
"result": {
"emails": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"ip_addresses": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"192.168.1.1",
"10.0.0.5",
"172.16.254.1",
"18.157.127.54",
"3.71.245.159"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"secrets": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
{
"type": "generic api key",
"value": [
"\"apikey\":\"development\"",
"apikey",
"development"
]
},
{
"type": "openai api key",
"value": "sk-aBcDeFgH1J2k3L4m6rStUvWxYz7"
}
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": []
},
"urls": {
"https://example.com#inline": [],
"https://example.com/assets/js/main.34a8df76.js": [
"http://www.w3.org/1999/xhtml",
"https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap",
"https://example.com/contact/",
"https://api.example.com",
"https://analytics.example.com",
"https://[email protected]/45066613888",
"https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview",
"http://www.w3.org/2000/svg",
"https://example.com/terms/",
"https://example.com/privacy/",
"https://www.linkedin.com/company/example-com/",
"https://cdn.example.com/image/upload/v1687682832",
"https://api.openai.com/v1/chat/completions",
"https://example.com/demo.mp4",
"https://github.com/example/repo"
],
"https://example.com/assets/js/polyfills.2b4c9e31.js": [
"https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE",
"https://github.com/systemjs/systemjs/blob/main/docs/errors.md#3"
]
}
},
"scan_id": "9b72e384f5c946a7b2d22053e8a7c69f",
"url": "https://example.com"
}curl -X GET "https://secrets.tools/api/credits" \
-H "X-API-KEY: YOUR_API_KEY"{
"credits": 85,
"user_email": "[email protected]",
"created_at": "Wed, 19 Mar 2025 15:29:20 GMT"
}