{
  "name": "url.scan",
  "group": "web",
  "summary": "Detect credentials, tokens and personal data leaking in a URL, and return a redacted version.",
  "description": "Scans a URL's query string, path, fragment and userinfo for secrets and personal data — provider API keys, JWTs, bearer tokens, private keys, high-entropy values in credential-shaped parameters, email addresses, national identifiers and Luhn-valid card numbers. A URL is the least private place to put a secret: it is written to server logs, proxy logs, browser history and Referer headers, none of which are covered by the transport encryption. Returns a redacted URL safe to paste into a log or a ticket.",
  "keywords": [
    "secret in url",
    "leaked api key",
    "token in query string",
    "redact url",
    "pii detection",
    "credential leak",
    "security scan",
    "safe logging",
    "referer leak"
  ],
  "endpoint": "https://fluentedi.com/v1/url/scan",
  "mcp_name": "url_scan",
  "makes_network_request": false,
  "parameters": {
    "type": "object",
    "properties": {
      "url": {
        "description": "URL to scan.",
        "type": "string",
        "maxLength": 8000,
        "examples": [
          "https://api.example.com/v1/items?api_key=sk_live_4eC39HqLyjWDarjtT1zdp7dc&user=ada@example.com"
        ]
      },
      "include_low": {
        "description": "Include low-severity findings such as tracking parameters.",
        "type": "boolean",
        "default": true
      }
    },
    "required": [
      "url"
    ],
    "additionalProperties": false
  },
  "examples": [
    {
      "description": "A live secret key in a query string",
      "url": "https://fluentedi.com/v1/url/scan?url=https%3A%2F%2Fapi.example.com%2Fv1%2Fcharges%3Fapi_key%3Dsk_live_4eC39HqLyjWDarjtT1zdp7dc",
      "args": {
        "url": "https://api.example.com/v1/charges?api_key=sk_live_4eC39HqLyjWDarjtT1zdp7dc"
      }
    },
    {
      "description": "Credentials embedded in userinfo",
      "url": "https://fluentedi.com/v1/url/scan?url=https%3A%2F%2Fadmin%3Ahunter2%40internal.example.com%2Fdashboard",
      "args": {
        "url": "https://admin:hunter2@internal.example.com/dashboard"
      }
    },
    {
      "description": "Personal data in a link",
      "url": "https://fluentedi.com/v1/url/scan?url=https%3A%2F%2Fexample.com%2Freset%3Femail%3Dada%40example.com%26token%3DeyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxIn0.abcdefghijk",
      "args": {
        "url": "https://example.com/reset?email=ada@example.com&token=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxIn0.abcdefghijk"
      }
    }
  ],
  "suggestion": null
}