redact-secret · Report
Families
One row per credential family, in taxonomy order. Counts are fixture rows for redact-secret on the current run; a fixture in two families appears in both rows. Choose an evidence level to count only the rows at that level.
| Family | Provider | Fixtures | Left readable | Too much | False alarms |
|---|---|---|---|---|---|
IAM user access keyaws:iam-user-access-key | Amazon Web Services | 31 | 0 | 0 | 0 |
STS temporary access keyaws:sts-temporary-access-key | Amazon Web Services | 31 | 0 | 0 | 0 |
STS service bearer tokenaws:sts-service-bearer-token | Amazon Web Services | 0 | No fixtures | — | — |
Context-specific credentialaws:context-specific-credential | Amazon Web Services | 0 | No fixtures | — | — |
IAM user secret access keyaws:iam-user-secret-access-key | Amazon Web Services | 64 | 1 | 0 | 0 |
Classic personal access tokengithub:classic-personal-access-token | GitHub | 116 | 0 | 0 | 0 |
OAuth access tokengithub:oauth-access-token | GitHub | 14 | 0 | 0 | 0 |
GitHub App user-to-server tokengithub:app-user-to-server-token | GitHub | 13 | 0 | 0 | 0 |
GitHub App server-to-server tokengithub:app-server-to-server-token | GitHub | 42 | 0 | 0 | 0 |
OAuth refresh tokengithub:oauth-refresh-token | GitHub | 10 | 0 | 0 | 0 |
Fine-grained personal access tokengithub:fine-grained-personal-access-token | GitHub | 40 | 0 | 0 | 0 |
Legacy personal access tokengitlab:legacy-personal-access-token | GitLab | 56 | 0 | 0 | 0 |
Routable personal access tokengitlab:routable-personal-access-token | GitLab | 31 | 0 | 0 | 7 |
Secret API keyopenai:secret-api-key | OpenAI | 47 | 0 | 0 | 0 |
Secret API keyanthropic:secret-api-key | Anthropic | 30 | 0 | 0 | 0 |
Custom app access tokenshopify:custom-app-access-token | Shopify | 13 | 0 | 0 | 0 |
Public app access tokenshopify:public-app-access-token | Shopify | 8 | 0 | 0 | 0 |
Service tokenhashicorp-vault:service-token | HashiCorp Vault | 15 | 0 | 0 | 0 |
Batch tokenhashicorp-vault:batch-token | HashiCorp Vault | 4 | 0 | 0 | 0 |
Recovery tokenhashicorp-vault:recovery-token | HashiCorp Vault | 3 | 0 | 0 | 0 |
Live secret keystripe:secret-key-live | Stripe | 21 | 0 | 0 | 0 |
Test secret keystripe:secret-key-test | Stripe | 71 | 0 | 0 | 0 |
Live restricted keystripe:restricted-key-live | Stripe | 5 | 0 | 0 | 0 |
Test restricted keystripe:restricted-key-test | Stripe | 4 | 0 | 0 | 0 |
Organization API keystripe:organization-api-key | Stripe | 28 | 0 | 0 | 0 |
Webhook signing secretstripe:webhook-signing-secret | Stripe | 29 | 0 | 0 | 0 |
Bot tokenslack:bot-token | Slack | 46 | 0 | 0 | 0 |
User tokenslack:user-token | Slack | 27 | 0 | 0 | 0 |
App-level tokenslack:app-level-token | Slack | 40 | 0 | 0 | 0 |
Workflow webhook tokenslack:workflow-webhook-token | Slack | 0 | No fixtures | — | — |
API tokenpypi:api-token | Python Package Index (PyPI) | 26 | 0 | 0 | 0 |
API tokenhuggingface:api-token | Hugging Face | 26 | 0 | 0 | 0 |
Personal access tokendocker:personal-access-token | Docker Hub | 14 | 0 | 0 | 0 |
OAuth access tokendocker:oauth-access-token | Docker Hub | 22 | 0 | 0 | 0 |
Scannable API tokencloudflare:api-token | Cloudflare | 24 | 0 | 0 | 0 |
Personal access tokendigitalocean:personal-access-token | DigitalOcean | 18 | 0 | 0 | 0 |
OAuth tokendigitalocean:oauth-token | DigitalOcean | 9 | 0 | 0 | 0 |
Refresh tokendigitalocean:refresh-token | DigitalOcean | 7 | 0 | 0 | 0 |
Personal API keylinear:personal-api-key | Linear | 27 | 0 | 0 | 0 |
OAuth access tokenlinear:oauth-access-token | Linear | 0 | No fixtures | — | — |
Project secret keysupabase:secret-key | Supabase | 30 | 0 | 0 | 0 |
Personal access tokensupabase:personal-access-token | Supabase | 26 | 0 | 0 | 0 |
Compatibility aggregate (unreviewed Vercel token shapes)vercel:access-token | Vercel | 20 | 0 | 0 | 0 |
Personal access tokenvercel:personal-access-token | Vercel | 40 | 0 | 0 | 1 |
Integration tokenvercel:integration-token | Vercel | 0 | No fixtures | — | — |
App access tokenvercel:app-access-token | Vercel | 40 | 0 | 0 | 1 |
App refresh tokenvercel:app-refresh-token | Vercel | 40 | 0 | 0 | 1 |
API keyvercel:api-key | Vercel | 0 | No fixtures | — | — |
Granular access tokennpm:granular-access-token | npm | 54 | 0 | 0 | 0 |
Legacy tokennpm:legacy-token | npm | 0 | No fixtures | — | — |
Generic API keygoogle:generic-api-key | 32 | 0 | 0 | 0 | |
OAuth2 access and refresh tokensgoogle:oauth2-credential | 0 | No fixtures | — | — | |
OAuth client secretgoogle:oauth-client-secret | 40 | 0 | 0 | 0 | |
API keysendgrid:api-key | Twilio SendGrid | 167 | 30 | 0 | 0 |
Application client secretmicrosoft-entra:application-client-secret | Microsoft Entra ID | 45 | 0 | 0 | 0 |
Personal access tokenazure-devops:personal-access-token | Azure DevOps | 29 | 0 | 0 | 0 |
Legacy integration tokennotion:legacy-integration-token | Notion | 29 | 0 | 0 | 0 |
Integration tokennotion:integration-token | Notion | 24 | 0 | 0 | 0 |
API tokenatlassian:api-token | Atlassian | 45 | 0 | 0 | 0 |
Access tokenatlassian:access-token | Atlassian | 0 | No fixtures | — | — |
Account auth tokentwilio:auth-token | Twilio | 64 | 0 | 0 | 0 |
API key secrettwilio:api-key-secret | Twilio | 50 | 0 | 0 | 0 |
Bot tokentelegram:bot-token | Telegram | 40 | 0 | 0 | 0 |
Bot tokendiscord:bot-token | Discord | 46 | 0 | 0 | 0 |
User auth tokensentry:user-auth-token | Sentry | 40 | 0 | 0 | 0 |
Organization auth tokensentry:organization-auth-token | Sentry | 40 | 0 | 0 | 0 |
API keydatadog:api-key | Datadog | 36 | 0 | 0 | 0 |
Application key (ddapp_-prefixed)datadog:application-key | Datadog | 29 | 0 | 0 | 0 |
Application key (legacy 40-hex)datadog:application-key-legacy | Datadog | 52 | 0 | 0 | 0 |
Service account tokengrafana:service-account-token | Grafana | 36 | 0 | 0 | 0 |
Cloud access policy tokengrafana:cloud-access-policy-token | Grafana | 36 | 0 | 0 | 0 |
User API keynew-relic:user-api-key | New Relic | 36 | 0 | 0 | 0 |
License keynew-relic:license-key | New Relic | 42 | 0 | 0 | 0 |
Legacy FCM server keyfirebase:server-key | Firebase | 45 | 0 | 0 | 0 |
User tokenhashicorp-terraform:user-token | HashiCorp Terraform Cloud/Enterprise | 6 | 0 | 0 | 0 |
Organization tokenhashicorp-terraform:organization-token | HashiCorp Terraform Cloud/Enterprise | 6 | 0 | 0 | 0 |
Team tokenhashicorp-terraform:team-token | HashiCorp Terraform Cloud/Enterprise | 3 | 0 | 0 | 0 |
Personal access tokenpulumi:personal-access-token | Pulumi | 6 | 0 | 0 | 0 |
Organization access tokenpulumi:organization-access-token | Pulumi | 6 | 0 | 0 | 0 |
Team access tokenpulumi:team-access-token | Pulumi | 3 | 0 | 0 | 0 |
Access token (EAAA)square:access-token | Square | 0 | No fixtures | — | — |
OAuth application secret (sq0csp-, sandbox-sq0csb-)square:oauth-application-secret | Square | 0 | No fixtures | — | — |
API key (xau_, xao_)xata:api-key | Xata | 0 | No fixtures | — | — |
Personal access token (sgp_)sourcegraph:access-token | Sourcegraph | 0 | No fixtures | — | — |
Root key (unkey_)unkey:root-key | Unkey | 0 | No fixtures | — | — |
Tokens (bkua_ and sibling role prefixes)buildkite:access-token | Buildkite | 0 | No fixtures | — | — |
Logfire token (pylf_v)pydantic:logfire-token | Pydantic | 0 | No fixtures | — | — |
Secret access token (sk.)mapbox:secret-access-token | Mapbox | 0 | No fixtures | — | — |
Access token (fm1r_, fm1a_, fm2_)fly:access-token | Fly.io | 0 | No fixtures | — | — |
PEM-encoded private keygeneric:private-key | Not provider-specific | 36 | 0 | 0 | 0 |
JSON Web Tokengeneric:jwt | Not provider-specific | 26 | 0 | 0 | 0 |
Bearer credentialgeneric:bearer-token | Not provider-specific | 52 | 2 | 0 | 0 |
Connection-string passwordgeneric:connection-string-password | Not provider-specific | 104 | 0 | 0 | 0 |
OTP seedgeneric:otp-seed | Not provider-specific | 24 | 0 | 0 | 0 |
Unclassified assignment literalgeneric:unclassified-assignment-literal | Not provider-specific | 237 | 35 | 0 | 1 |
Personal access tokendatabricks:personal-access-token | Databricks | 47 | 0 | 0 | 0 |
Cloud API secret (cflt-prefixed)confluent:cloud-api-secret | Confluent Cloud | 31 | 0 | 0 | 0 |
Cloud API secret (unprefixed, pre-2025-07-30)confluent:cloud-api-secret-legacy | Confluent Cloud | 60 | 0 | 0 | 0 |
API keypostman:api-key | Postman | 46 | 0 | 0 | 0 |
Collection access keypostman:collection-access-key | Postman | 42 | 0 | 0 | 0 |
Personal access tokennetlify:personal-access-token | Netlify | 24 | 0 | 0 | 0 |
CLI, OAuth, app and build tokens (nfc_/nfo_/nfu_/nfb_)netlify:other-prefixed-tokens | Netlify | 0 | No fixtures | — | — |
OAuth access token (HRKU-prefixed)heroku:oauth-access-token | Heroku | 29 | 0 | 0 | 0 |
Legacy API key (bare UUID)heroku:legacy-api-key | Heroku | 63 | 0 | 0 | 0 |
Marketing API keymailchimp:marketing-api-key | Mailchimp | 54 | 0 | 0 | 0 |
Private API key and HTTP webhook signing keymailgun:private-api-key | Mailgun | 43 | 0 | 0 | 0 |
Public validation key (pubkey-)mailgun:public-validation-key | Mailgun | 0 | No fixtures | — | — |
Prefix-less 32-8-8 hex key tripletmailgun:legacy-signing-key-triplet | Mailgun | 0 | No fixtures | — | — |
Management API token (SSWS)okta:api-token | Okta | 40 | 0 | 0 | 0 |
API tokenreplicate:api-token | Replicate | 32 | 0 | 0 | 0 |
API keygroq:api-key | Groq | 41 | 0 | 0 | 0 |
API keyxai:api-key | xAI | 41 | 0 | 0 | 0 |
Inference API keyopenrouter:api-key | OpenRouter | 32 | 0 | 0 | 0 |
Management API keyopenrouter:management-api-key | OpenRouter | 0 | No fixtures | — | — |
API key (personal access token or service key)langsmith:api-key | LangSmith (LangChain) | 42 | 0 | 0 | 0 |
Secret API keylangfuse:secret-key | Langfuse | 42 | 0 | 0 | 0 |
API keyperplexity:api-key | Perplexity | 41 | 0 | 0 | 0 |
API keyfireworks-ai:api-key | Fireworks AI | 32 | 0 | 0 | 0 |
API key (pcsk_)pinecone:api-key | Pinecone | 43 | 0 | 0 | 0 |
Legacy API key (bare UUID)pinecone:legacy-api-key | Pinecone | 48 | 0 | 0 | 0 |
Runner authentication tokengitlab:runner-authentication-token | GitLab | 43 | 0 | 0 | 0 |
API tokentravis-ci:api-token | Travis CI | 48 | 0 | 0 | 0 |
API keyneon:api-key | Neon | 42 | 0 | 0 | 0 |
Enterprise organization key (sk-ant-api01-)anthropic:compliance-access-key | Anthropic | 37 | 0 | 0 | 0 |
Admin API key (sk-ant-admin01-)anthropic:admin-api-key | Anthropic | 39 | 0 | 0 | 0 |
Admin API key (sk-admin-)openai:admin-api-key | OpenAI | 43 | 0 | 0 | 0 |
Long-term API key (ABSK)aws-bedrock:long-term-api-key | Amazon Bedrock | 44 | 0 | 0 | 0 |
Short-term API key (bedrock-api-key-)aws-bedrock:short-term-api-key | Amazon Bedrock | 34 | 0 | 0 | 0 |
API key (sk_)elevenlabs:api-key | ElevenLabs | 38 | 0 | 0 | 0 |
Project API key (tgp_v1_)together:api-key | Together AI | 56 | 0 | 0 | 0 |
API key (tvly-)tavily:api-key | Tavily | 45 | 0 | 0 | 0 |
Studio API key (unprefixed)mistral:api-key | Mistral AI | 68 | 0 | 0 | 0 |
API key (unprefixed)cohere:api-key | Cohere | 78 | 0 | 0 | 0 |
API key (unprefixed)deepgram:api-key | Deepgram | 82 | 0 | 0 | 0 |
API key (unprefixed)ai21:api-key | AI21 Labs | 60 | 0 | 0 | 0 |
API key (no evidenced shape)exa:api-key | Exa | 30 | 2 | 0 | 0 |
Realtime client token (rt_)mistral:realtime-client-token | Mistral AI | 0 | No fixtures | — | — |
API key (pa- or al-)voyage-ai:api-key | Voyage AI | 0 | No fixtures | — | — |
Deployment, project and admin key (hex body)convex:deployment-key | Convex | 41 | 0 | 0 | 0 |
Service account token (ops_)onepassword:service-account-token | 1Password | 39 | 0 | 0 | 0 |
Signing key (signkey-)inngest:signing-key | Inngest | 40 | 0 | 0 | 0 |
API key (re_)resend:api-key | Resend | 42 | 0 | 0 | 0 |
API token (apify_api_)apify:api-token | Apify | 38 | 0 | 0 | 0 |
API key (wandb_v1_)wandb:api-key | Weights & Biases | 35 | 0 | 0 | 0 |
Service token (dp.st.)doppler:service-token | Doppler | 51 | 0 | 0 | 0 |
Personal token (dp.pt.)doppler:personal-token | Doppler | 36 | 0 | 0 | 0 |
CLI token (dp.ct.)doppler:cli-token | Doppler | 36 | 0 | 0 | 0 |
Service account token (dp.sa.)doppler:service-account-token | Doppler | 37 | 0 | 0 | 0 |
Service account identity token (dp.said.)doppler:service-account-identity-token | Doppler | 36 | 0 | 0 | 0 |
SCIM token (dp.scim.)doppler:scim-token | Doppler | 36 | 0 | 0 | 0 |
Audit token (dp.audit.)doppler:audit-token | Doppler | 36 | 0 | 0 | 0 |
Environment secret key (tr_ENV_ / tr_ENV_sk_)trigger-dev:secret-api-key | Trigger.dev | 50 | 0 | 0 | 0 |
Personal access token (tr_pat_)trigger-dev:personal-access-token | Trigger.dev | 28 | 0 | 0 | 0 |
Team API key (e2b_)e2b:api-key | E2B | 43 | 0 | 0 | 0 |
Personal API key (phx_)posthog:personal-api-key | PostHog | 44 | 0 | 0 | 0 |
Project secret API key (phs_)posthog:project-secret-api-key | PostHog | 36 | 0 | 0 | 0 |
Read-write key (sk-helicone-)helicone:api-key | Helicone | 45 | 0 | 0 | 0 |
Write-only key (pk-helicone-)helicone:write-api-key | Helicone | 36 | 0 | 0 | 0 |
API key (fc-)firecrawl:api-key | Firecrawl | 48 | 0 | 0 | 0 |
Project API key (ak_)composio:project-api-key | Composio | 48 | 0 | 0 | 0 |
Org API key (oak_)composio:org-api-key | Composio | 36 | 0 | 0 | 0 |
User API key (uak_)composio:user-api-key | Composio | 36 | 0 | 0 | 0 |
API key (dtn_)daytona:api-key | Daytona | 44 | 0 | 0 | 0 |
API key secret (4b1d)clickhouse-cloud:api-key | ClickHouse Cloud | 45 | 0 | 0 | 0 |
API key (nvapi-)nvidia:ngc-api-key | NVIDIA | 39 | 0 | 0 | 0 |
API key (bb_live_)browserbase:api-key | Browserbase | 38 | 0 | 0 | 0 |
Inference API key (csk-)cerebras:inference-api-key | Cerebras | 46 | 0 | 0 | 0 |
API key (rpa_)runpod:api-key | RunPod | 36 | 0 | 0 | 0 |
Secrets Manager access token (0. + UUID layout)bitwarden:secrets-manager-access-token | Bitwarden | 46 | 0 | 0 | 0 |
Organization access token (polar_oat_)polar:organization-access-token | Polar | 38 | 0 | 0 | 0 |
API credentials (polar_pat_, polar_at_, polar_rt_, polar_cs_, polar_crt_)polar:api-credential | Polar | 28 | 0 | 0 | 0 |
User token (squ_)sonarqube:user-token | SonarQube | 40 | 0 | 0 | 0 |
Analysis tokens (sqa_, sqp_)sonarqube:analysis-token | SonarQube | 28 | 0 | 0 | 0 |
API key (rubygems_)rubygems:api-key | RubyGems.org | 39 | 0 | 0 | 0 |
Deploy token (CLOJARS_)clojars:deploy-token | Clojars | 37 | 0 | 0 | 0 |
API token (cio)crates-io:api-token | crates.io | 37 | 0 | 0 | 0 |
Trusted-publishing token (cio_tp_)crates-io:trusted-publishing-token | crates.io | 29 | 0 | 0 | 0 |
Access and platform token (dt0c01, dt0s..)dynatrace:api-token | Dynatrace | 41 | 0 | 0 | 0 |
Billing API key (pdl_live_/pdl_sdbx_apikey_)paddle:api-key | Paddle | 41 | 0 | 0 | 0 |
Ingest key (hcXik_, hcXic_)honeycomb:ingest-key | Honeycomb | 39 | 0 | 0 | 0 |
API token (xaat-)axiom:api-token | Axiom | 37 | 0 | 0 | 0 |
Personal access token (xapt-)axiom:personal-token | Axiom | 25 | 0 | 0 | 0 |
Session and OAuth2 sibling tokensory:network-api-key | Ory | 0 | No fixtures | — | — |
API key (b10_)baseten:api-key | Baseten | 0 | No fixtures | — | — |