The Developer Platform for Modern APIs

HTTP client/libcurl TUI front end in Rust, with request + key storage

A Configurable template for a FastAPI application, with Authentication, User integration, Admin pages and a snappy CLI to control it all!

The uuidkey package encodes UUIDs to a readable Key format via the Base32-Crockford codec.

Add API keys to your Laravel models.

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and many other juicy information.

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

A TypeScript library for secure API key management with cryptographic hashing, expiration, scopes, and pluggable storage

Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.

🔐 A self-hosted credential manager with zero-knowledge encryption, multi-user support, and emergency recovery. Store API keys, passwords, and secrets securely with your own Supabase database. Features AES-256-GCM encryption, Argon2 key derivation, PWA support, and professional-grade security architecture.

Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.

Automatic Secret Finder - JWT, Access Token, API keys... Based on m4ll0k/SecretFinder

Upbox - delivery app to hire dispatch riders

Scan Google Maps Api Keys and see which services you can use. Original codebase from ozguralp/gmapsapiscanner

An exercise to research and explore the best ways to hide a secret in the code of a mobile app. Article: https://blog.approov.io/how-to-extract-an-api-key-from-a-mobile-app-with-static-binary-analysis

Companion example code for the "Authentication in ArcGIS" technical session at Esri Developer Summit

SCAN: Sensitive Code Analyzer for Nerds

A list of different types of API keys and how to prove impact for bug bounty programs.

Trishul searches for sensitive data with options to specify custom files and custom keywords to look for in the filesystem

Search for Secrets and Other Confidential Information Through Directories and Files Based on Regex and Search Strings.