RelayShield llm-credential-exposurePOST /v1/payg/llm-credential-exposure · x402 API by api.relayshield.net
Check whether a domain's LLM/AI provider API keys (OpenAI, Anthropic, Google, Groq, xAI, Replicate) appear exposed in criminal stealer logs. This is LLMjacking, a fast-growing threat where a leaked key becomes a live, uncapped billing liability rather than just a data exposure. Call to catch an exposed key before the drain, not after the invoice. · Keywords: x402, security, wallet-screening, crypto-security, sanctions, breach, credentials, infostealer, sim-swap, agent-security
What does this x402 API do?
RelayShield llm-credential-exposure. This is an x402-gated POST API resource from api.relayshield.net. TOLL·402 did not invoke this route automatically because doing so was not considered safe. The listing records $0.4 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $0.4 USD-denominated per request
- Networks
- Base
- Latest evidence
- TOLL·402 did not invoke this route automatically because doing so was not considered safe
- Resource ID
- c95eacc9069bcddea21d7864
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://api.relayshield.net/v1/payg/llm-credential-exposure", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({
"replace": "with provider-approved input"
}),
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.Review the provider input schema before running this non-read-only method. No payment code is included.
- Exact route checked
not safely testable · potentially-mutating-method:POST
- Origin unavailable
timeout
- Observed in 402-index
Discovered through self-registered.
- Registry record checked
Registry health: healthy.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $0.4 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.