LeakGuard by AgentGate
Deep leak scan of text or a JSON payload: findings by JSON path, redacted JSON, remediation steps, and for leaked seed phrases or private keys the wallet addresses they control with native and USDC balances on Base, Ethereum, Polygon, Arbitrum and Solana (funds at risk now?).
MediaLiveeip155:8453Exactvia facilitator:payAI
Secret-scanningPii-redactionSeed-phraseDlpScan_for_leaks
Calls · 30d
3
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far.
$256.05
Verified settled volume
225 settlements proven x402 by their on-chain EIP-3009 marker.
$0.020
Listed price
As published in the catalog. Always read the live 402 before paying.
—
Calls · 30d
Upstream's own call count for this endpoint, not ours.
—
Unique payers · 30d
Never called
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6FThe wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "X-PAYMENT header is required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F",
"scheme": "exact",
"network": "base",
"mimeType": "application/json",
"resource": "https://api.youraitools.co/leakguard/v1/scan",
"description": "Deep leak scan of text or a JSON payload: findings by JSON path, redacted JSON, remediation steps, and for leaked seed phrases or private keys the wallet addresses they control with native and USDC balances on Base, Ethereum, Polygon, Arbitrum and Solana (funds at risk now?).",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"text": {
"type": "string",
"required": true,
"description": "Text to check before it is sent (prompt, tool arguments, log, message, file content). POST /v1/scan also accepts {\"json\": <any JSON payload>}."
}
},
"discoverable": true
},
"output": {
"tier": "scan",
"input": {
"kind": "text",
"bytes": 185,
"strings_scanned": 1
},
"counts": {
"email": 1,
"bip39_mnemonic": 1,
"aws_access_key_id": 1
},
"engine": "leakguard-0.1.0 (leakguard-engine/0.1.0)",
"actions": [
"URGENT: a leaked key controls a wallet that holds funds right now. Move the funds to a new wallet before anything else.",
"Treat the wallet as compromised: create a new seed offline and move all funds now. Never paste a seed phrase into a chat, prompt or tool.",
"Deactivate and rotate the access key in AWS IAM; check CloudTrail for use.",
"Personal data: send only if the recipient needs it (data minimization).",
"Send the redacted output instead of the original."
],
"verdict": "WALLET_KEY_EXPOSED",
"exposure": {
"status": "funds_at_risk",
"addresses": [
{
"path": "m/44'/60'/0'/0/0",
"type": "bip39_mnemonic",
"family": "evm",
"status": "used_empty",
"address": "0x9858EfFD232B4033E47d90003D41EC34EcaEda94",
"finding": 0,
"balances": {
"base": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 5313
},
"polygon": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 13405
},
"arbitrum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 849
},
"ethereum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 1679
}
}
},
{
"path": "m/44'/60'/0'/0/1",
"type": "bip39_mnemonic",
"family": "evm",
"status": "used_empty",
"address": "0x6Fac4D18c912343BF86fa7049364Dd4E424Ab9C0",
"finding": 0,
"balances": {
"base": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 1254
},
"polygon": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 2740
},
"arbitrum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 457
},
"ethereum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 167
}
}
},
{
"path": "m/44'/60'/0'/0/2",
"type": "bip39_mnemonic",
"family": "evm",
"status": "used_empty",
"address": "0xb6716976A3ebe8D39aCEB04372f22Ff8e6802D7A",
"finding": 0,
"balances": {
"base": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 463
},
"polygon": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 1331
},
"arbitrum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 359
},
"ethereum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 118
}
}
},
{
"path": "m/44'/501'/0'/0'",
"type": "bip39_mnemonic",
"family": "solana",
"status": "funds_at_risk",
"address": "HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk",
"finding": 0,
"balances": {
"solana": {
"usdc": "0",
"funded": true,
"native": "2.284709463",
"tx_count": null
}
}
},
{
"path": "m/44'/501'/0'",
"type": "bip39_mnemonic",
"family": "solana",
"status": "funds_at_risk",
"address": "GjJyeC1r2RgkuoCWMyPYkCWSGSGLcz266EaAkLA27AhL",
"finding": 0,
"balances": {
"solana": {
"usdc": "0",
"funded": true,
"native": "0.003412816",
"tx_count": null
}
}
}
],
"not_checked": [],
"chains_checked": [
"base",
"ethereum",
"polygon",
"arbitrum",
"solana"
],
"sources_failed": []
},
"findings": [
{
"end": 130,
"type": "bip39_mnemonic",
"start": 37,
"preview": "[REDACTED:bip39_mnemonic]",
"category": "wallet_key",
"severity": "critical",
"validator": "bip39 checksum ok (12 words)",
"confidence": 0.99,
"remediation": "Treat the wallet as compromised: create a new seed offline and move all funds now. Never paste a seed phrase into a chat, prompt or tool."
},
{
"end": 160,
"type": "aws_access_key_id",
"start": 140,
"preview": "[REDACTED:aws_access_key_id]",
"category": "secret",
"severity": "high",
"confidence": 0.9,
"remediation": "Deactivate and rotate the access key in AWS IAM; check CloudTrail for use."
},
{
"end": 185,
"type": "email",
"start": 170,
"preview": "o***@example.com",
"category": "pii",
"severity": "medium",
"confidence": 0.9,
"remediation": "Personal data: send only if the recipient needs it (data minimization)."
}
],
"redacted": "agent log: restored wallet from seed [REDACTED:bip39_mnemonic]; aws key [REDACTED:aws_access_key_id]; contact [REDACTED:email]",
"checked_at": "2026-10-22T19:07:15.558Z",
"confidence": "high",
"max_severity": "critical",
"safe_to_send": false,
"sources_failed": []
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 120
}
],
"message": "Payment required: LeakGuard GET /leakguard/v1/scan costs $0.02 per call in USDC. Stop agents leaking secrets: before text or a JSON payload goes to an LLM, tool, log or webhook, finds and redacts crypto wallet keys (BIP39 seed phrases with checksum, EVM and Solana private keys, WIF, xprv), API secrets (GitHub, AWS, Stripe, OpenAI, Anthropic, Slack, Telegram, npm, JWT, PEM) and PII (cards, IBAN, SSN, email, phone). Pay per call in USDC with any x402 client: read the PAYMENT-REQUIRED header (x402 v2) or the accepts list in this body (x402 v1), sign the payment and retry the same request with the PAYMENT-SIGNATURE (v2) or X-PAYMENT (v1) header. Networks: Base, Polygon, Arbitrum, Solana. No account, no API key. No crypto wallet? Buy prepaid credits by card or USDC at https://api.youraitools.co/credits/ and send them as a Bearer key. Free: No daily free quota on the paid route; free preview at https://api.youraitools.co/leakguard/v1/preview (rate-limited per minute) and free-tier MCP access via the YourAITools MCP Hub https://api.youraitools.co/mcp/hub.",
"x402Version": 1,
"payment_help": {
"docs": "https://api.youraitools.co/leakguard/",
"tool": "LeakGuard",
"what": "Stop agents leaking secrets: before text or a JSON payload goes to an LLM, tool, log or webhook, finds and redacts crypto wallet keys (BIP39 seed phrases with checksum, EVM and Solana private keys, WIF, xprv), API secrets (GitHub, AWS, Stripe, OpenAI, Anthropic, Slack, Telegram, npm, JWT, PEM) and PII (cards, IBAN, SSN, email, phone). The scan tier takes JSON payloads and reports which wallets a leaked key controls and whether they hold funds now on Base, Ethereum, Polygon, Arbitrum One and Solana (fail-closed: unknown, never empty). Inputs never logged or stored.",
"price": "$0.02 per call (USDC)",
"route": "GET https://api.youraitools.co/leakguard/v1/scan",
"mcp_hub": "https://api.youraitools.co/mcp/hub",
"free_tier": "No daily free quota on the paid route; free preview at https://api.youraitools.co/leakguard/v1/preview (rate-limited per minute) and free-tier MCP access via the YourAITools MCP Hub https://api.youraitools.co/mcp/hub.",
"pay_with_x402": "Pay per call in USDC with any x402 client: read the PAYMENT-REQUIRED header (x402 v2) or the accepts list in this body (x402 v1), sign the payment and retry the same request with the PAYMENT-SIGNATURE (v2) or X-PAYMENT (v1) header. Networks: Base, Polygon, Arbitrum, Solana. No account, no API key.",
"pay_with_credits": {
"url": "https://api.youraitools.co/credits/",
"use": "Send the key as Authorization: Bearer yatc_... on the same request; each call is deducted at the listed price.",
"card": "Pay by card (Stripe): $5, $20 or $50 credit packs, no crypto wallet needed.",
"wallet": "Or buy $1 or $5 of credits in USDC with the one-click browser wallet button on the same page.",
"card_checkout": "https://api.youraitools.co/credits/ (choose a pack under Pay by card; Stripe checkout opens in one click)"
}
}
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.02USDC≈ $0.02 USD
on Base · exact scheme
Pay 0.02 USDC on Base to 0x3c1A…08d6F. The signed payment is good for 2 minutes.
- Paid to
- 0x3c1A…08d6F
- USD Coin contract
- 0x8335…02913
- Payment window
- 2 minutes
- As published
- 20000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F",
"amount": "20000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 120
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"text": "agent log: restored wallet from seed abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about; aws key AKIAIOSFODNN7EXAMPLE; contact ops@example.com"
}
},
"output": {
"type": "json",
"example": {
"tier": "scan",
"input": {
"kind": "text",
"bytes": 185,
"strings_scanned": 1
},
"counts": {
"email": 1,
"bip39_mnemonic": 1,
"aws_access_key_id": 1
},
"engine": "leakguard-0.1.0 (leakguard-engine/0.1.0)",
"actions": [
"URGENT: a leaked key controls a wallet that holds funds right now. Move the f..."
],
"verdict": "WALLET_KEY_EXPOSED",
"exposure": {
"status": "funds_at_risk",
"addresses": [
{
"path": "m/44'/60'/0'/0/0",
"type": "bip39_mnemonic",
"family": "evm",
"status": "used_empty",
"address": "0x9858EfFD232B4033E47d90003D41EC34EcaEda94",
"finding": 0,
"balances": {
"base": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 5313
},
"polygon": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 13405
},
"arbitrum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 849
},
"ethereum": {
"usdc": "0",
"funded": false,
"native": "0",
"tx_count": 1679
}
}
}
],
"not_checked": [],
"chains_checked": [
"base"
],
"sources_failed": []
},
"findings": [
{
"end": 130,
"type": "bip39_mnemonic",
"start": 37,
"preview": "[REDACTED:bip39_mnemonic]",
"category": "wallet_key",
"severity": "critical",
"validator": "bip39 checksum ok (12 words)",
"confidence": 0.99,
"remediation": "Treat the wallet as compromised: create a new seed offline and move all funds..."
}
],
"redacted": "agent log: restored wallet from seed [REDACTED:bip39_mnemonic]; aws key [REDA...",
"checked_at": "2026-10-22T19:07:15.558Z",
"confidence": "high",
"max_severity": "critical",
"safe_to_send": false,
"sources_failed": []
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"text"
],
"properties": {
"text": {
"type": "string",
"description": "Text to check before it is sent (prompt, tool arguments, log, message, file content). POST /v1/scan also accepts {\"json\": <any JSON payload>}."
},
"style": {
"enum": [
"label",
"mask"
],
"type": "string",
"description": "label: [REDACTED:type] (default); mask: keep the last 4 digits / email domain for PII"
},
"types": {
"type": "string",
"description": "Optional comma-separated finding types or categories to report (wallet_key, secret, pii, email, ...)"
},
"min_severity": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-24 22:12Z
- Last indexed by Roundhouse
- 2026-10-26 06:16Z
- Last enriched (probe, favicon, geo)
- 2026-10-25 11:17Z
- x402 version
- 2
- Max timeout
- 120s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service LeakGuard by AgentGate and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=LeakGuard%20by%20AgentGate' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://api.youraitools.co/leakguard/v1/scan, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.