Export Secrets Scanner avatar

Export Secrets Scanner

Under maintenance

Pricing

from $0.01 / 1,000 results

Go to Apify Store
Export Secrets Scanner

Export Secrets Scanner

Under maintenance

Scan a CSV or JSON export for leaked secrets and PII before sharing: API keys, tokens, private keys, JWTs, Luhn-validated cards, emails, phones. Returns a scrubbed copy plus a machine-checkable report with SHA-256 hashes. No LLM - fixed patterns, never guesses.

Pricing

from $0.01 / 1,000 results

Rating

0.0

(0)

Developer

Andrew

Andrew

Maintained by Community

Actor stats

0

Bookmarked

1

Total users

0

Monthly active users

5 days ago

Last modified

Share

Deterministic secrets & PII scanner for shared exports (CSV / JSON). No LLM — fixed, documented patterns only. Never guesses, never removes data.

What it detects

  • Secrets: AWS access keys, GitHub tokens (ghp_, github_pat_), Stripe secret keys, Google API keys, Slack tokens, private key blocks, JWTs
  • PII: emails, US phone numbers, US SSNs, Luhn-validated card numbers (non-Luhn 13–19 digit runs like order numbers are deliberately left alone)
  • Sensitive columns: any column named password/token/secret/api_key/etc. is masked wholesale, whatever its content

What you get

  1. scrubbed_content — deterministically masked copy (same input, same output)
  2. scan.findings — every match: type, description, location, what it was masked to
  3. hashes.original_sha256 + hashes.scrubbed_sha256 — recipients can re-hash the original file and verify it is the exact file that was scanned

Fail-closed rules

Empty input, NUL bytes, >4 MB, non-JSON in JSON mode, and unsupported formats are rejected with a machine-readable error code. Unknown data is never altered.

Apify

Input: {"content": "<csv|json text>", "format": "csv"|"json"}. Pay-per-event scan-completed fires once per successful scan when ESSCAN_CHARGE_ENABLED=1.

Use from AI agents

Call via Apify MCP (search-actors -> fetch-actor-details -> call-actor) or the REST/Python/JS clients. Always pass a per-run spend cap: callOptions: {"maxTotalChargeUsd": <1.00>, "timeout": 120}. Deterministic and fail-closed: errors like SCHEMA_DRIFT or UNSUPPORTED_* mean the layout is unsupported - retrying will not help; surface the code to the user. Agent skill covering this and 7 sibling actors: https://github.com/ahf15811987-sketch/agent-skills