Pricing

Pay per usage

PocketBase Security Scanner — Find public collection leaks

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

Categories

Developer tools

You can access the PocketBase Security Scanner — Find public collection leaks programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "pocketbaseUrl": "https://YOUR-INSTANCE.fly.dev" }
9
10# Run the Actor and wait for it to finish
11run = client.actor("renzomacar/pocketbase-security-scanner").call(run_input=run_input)
12
13# Fetch and print Actor results from the run's dataset (if there are any)
14print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
15for item in client.dataset(run["defaultDatasetId"]).iterate_items():
16    print(item)
17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

PocketBase Security Scanner — Find public collection leaks API in Python

The Apify API client for Python is the official library that allows you to use PocketBase Security Scanner — Find public collection leaks API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

PocketBase Security Scanner — Find public collection leaks API in JavaScript

PocketBase Security Scanner — Find public collection leaks API through CLI

PocketBase Security Scanner — Find public collection leaks OpenAPI definition

PocketBase Security Scanner — Find public collection leaks API

Appwrite Security Scanner — Find public collection leaks

renzomacar/appwrite-security-scanner

Probes a public Appwrite project for collection permission misconfigurations. Detects collections readable by guest role via /v1/databases/*/collections/*/documents. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

Firebase Security Scanner — Detect public Firestore/RTDB leaks

renzomacar/firebase-security-scanner

Probes a public Firebase project for misconfigured Security Rules. Detects Firestore collections and Realtime Database paths readable without auth — the #1 cause of Firebase data leaks. Returns counts + curl reproducer per finding. Counts only, no data exfiltrated.

Renzo Madueno

PocketBase Security Audit - Find Open API Rules Free

renzomacar/pocketbase-security-auditor

Audit any PocketBase instance for collections with empty (public) list/view/create/update/delete rules and over-permissive endpoints. Active anon fetch confirms live leaks. HTML report with paste-ready collection rule snippets. Free.

Renzo Madueno

Supabase RLS Security Scanner — Find anonymous data leaks

renzomacar/supabase-rls-scanner

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated.

Renzo Madueno

Nhost Security Scanner — Find public Hasura GraphQL leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

Shopify Scraper - Products, Collections, Analysis

prodiger/shopify-scraper

Scrape products and collections from any Shopify-powered store. Pay-per-event pricing — only pay for the items you actually scrape. No API key needed.

Arnas

Appwrite Security Audit - Find Public Collections Free

renzomacar/appwrite-security-auditor

Audit any Appwrite project (cloud or self-hosted) for collections with over-permissive document-level permissions, public reads, and anonymous writes. Active anon fetch confirms live leaks. HTML report with paste-ready fix snippets. Free.

Renzo Madueno

Shopify Scraper — Products, Collections, Reviews & Emails

khadinakbar/shopify-all-in-one-scraper

Extract Shopify products, collections, reviews & merchant emails from any store. No login required. CRM-ready JSON $3.00/1K.

Khadin Akbar

Magic Eden NFT Collection Scraper

parseforge/magic-eden-nft-scraper

Scrape Solana NFT collections from Magic Eden public API. Returns collection metadata, social links, floor price, listed count, 24h avg price, total volume, and (optional) per-collection active listings. No API key required.

ParseForge

Firebase Firestore Security Audit - Find if-true Leaks Free

renzomacar/firebase-security-auditor

Static analyzer for firestore.rules + live anonymous probe. Detects 'if true' wide-open rules, expired test-mode, auth-only patterns, open storage. HTML report with paste-ready fix snippets. Free demo mode if you don't have rules handy.

Renzo Madueno