{"id":"agent-secret-scanner","card_id":"card_agent_secret_scanner","name":"Agent secret scanner","description":"Scans supplied text/file metadata for likely secrets and returns redacted PASS/REVIEW/BLOCK findings before AI-mediated upload.","stage":1,"safety_level":"data_only_read_only","auth":{"type":"hmac-sha256","required_headers":["x-apex-tool-timestamp","x-apex-tool-nonce","x-apex-tool-content-sha256","x-apex-tool-signature"],"canonical_payload":"APEX-TOOL-V1\\n{tool_id}\\n{timestamp}\\n{nonce}\\n{sha256(canonical_json(body))}"},"input_schema":{"type":"object","properties":{"text":{"type":"string"},"files":{"type":"array"}}},"output_schema":{"type":"object","properties":{"decision":{"type":"string"},"findings":{"type":"array"},"not_echoing_secret_values":{"type":"boolean"}}},"sample_input":{"files":[{"path":"README.md","content":"OPENAI_API_KEY=sk-redacted-example-token"}]}}