Pricing

from $20.00 / 1,000 run starteds

Try for free

Go to Apify Store

Deployed Frontend Secret and Debug Endpoint Exposure Gate

Try for free

Reads the script bundles that your deployed pages load from their own origin and probes a fixed set of debug and schema paths. Reports each leaked key and each exposed endpoint with a redacted match, and gives one gate_pass verdict for your build step. HT

Pricing

from $20.00 / 1,000 run starteds

Rating

0.0

(0)

Developer

kingii98

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

You can access the Deployed Frontend Secret and Debug Endpoint Exposure Gate programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "urls": [
12        "https://example.com/",
13        "https://www.iana.org/"
14    ],
15    "ownershipConfirmed": true,
16    "scanBundles": true,
17    "maxBundleBytes": 2000000,
18    "maxScriptsPerPage": 10,
19    "probePaths": [
20        "/.env",
21        "/.env.local",
22        "/.git/config",
23        "/actuator/env",
24        "/debug/vars",
25        "/swagger.json",
26        "/openapi.json",
27        "/api-docs",
28        "/swagger-ui.html",
29        "/graphql",
30        "/graphiql",
31        "/server-status"
32    ],
33    "failOn": "high",
34    "timeoutSeconds": 15,
35    "maxRequests": 400,
36    "maxRedirects": 2,
37    "trackBaseline": false,
38    "baselineKey": "baseline"
39};
40
41// Run the Actor and wait for it to finish
42const run = await client.actor("kingii98/deployed-frontend-secret-and-debug-endpoint-exposure-gate").call(input);
43
44// Fetch and print Actor results from the run's dataset (if any)
45console.log('Results from dataset');
46console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
47const { items } = await client.dataset(run.defaultDatasetId).listItems();
48items.forEach((item) => {
49    console.dir(item);
50});
51
52// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Deployed Frontend Secret and Debug Endpoint Exposure Gate API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Deployed Frontend Secret and Debug Endpoint Exposure Gate API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Deployed Frontend Secret and Debug Endpoint Exposure Gate API in Python

Deployed Frontend Secret and Debug Endpoint Exposure Gate API through CLI

Deployed Frontend Secret and Debug Endpoint Exposure Gate OpenAPI definition

Deployed Frontend Secret and Debug Endpoint Exposure Gate API

Frontend Secret Exposure Scanner

q_services/frontend-secret-exposure-scanner

Find AWS, Google, GitHub, Stripe, Slack, JWT, private-key and generic secret patterns exposed in HTML or JavaScript.

Q Services

Public API Exposure Auditor

bmiller1009/api-exposure-auditor

Audit a public OpenAPI 3.0/3.1 description for admin, operator, internal, billing, and debug surfaces that should not be publicly exposed.

Sentinel Signal

Third-Party Script Integrity Pin and Content Drift Gate

kingii98/third-party-script-integrity-pin-and-content-drift-gate

Reads the served HTML of each page, lists every external script and stylesheet, and judges each one against your origin allowlist, your integrity policy and a rule that rejects mutable CDN paths such as 'latest', 'main' or a bare major version. It then fe

kingii98

Browser API CORS Allowlist and Credential Exposure Gate

kingii98/browser-api-cors-allowlist-and-credential-exposure-gate

Sends a real OPTIONS preflight and a real cross-origin GET from each origin that you name, against each API path that you name. Reports which origins the API accepts, which accept credentials, and every violation class: wildcard with credentials, origin r

kingii98

Website API and Endpoint Analyzer

lofomachines/website-api-and-endpoint-analyzer

Analyze one or more page URLs and output one dataset row per detected API or endpoint with network metadata and risk signals.

Lofomachines

Actor Troubleshooter

jiri.spilka/actor-troubleshooter

Diagnoses problems with any Apify Actor and (optionally) drafts a reply for the maintainer to send to the user. Investigates via MCP: input schema, README, run logs, and dataset samples. Returns structured analysis plus a per-step debug trace.

Jiří Spilka

Amazon Products By Category Scraper

pintostudio/amazon-products-by-category-scraper

The Amazon Products By Category Actor is a web scraping tool deployed on the Apify platform that extracts product information from Amazon category pages.

Pinto Studio

Agent Output Gate - PII, Link & Hallucination Check

apricot_blackberry/agent-output-gate

A safety gate between your AI agent and the send button. Scans a draft for PII and leaked secrets (Luhn-checked cards, API keys), broken links, and claims not supported by your source URLs, then returns pass/fail, flagged excerpts, and PII-redacted text.