API Key Identifier
Paste a key or token and see which service it belongs to. The identification runs in your browser and the text stays there.
✓ Client-side • The key never leaves this page • Free, no account
The match happens in your browser.
This uses the detection engine behind the Secret Scanner. It matches the pasted text against the known formats for OpenAI, Anthropic, AWS, GitHub, Stripe and dozens more services, then reports what it found. The text never leaves the page.
1. Paste
A key, a config line, a whole .env block from an old repo.
2. Match
Fixed formats decide the service, entropy checks cover the rest.
3. Rotate
If the key is real, revoke it where it was issued and scan for copies.
- You found a key in a chat log or an old repository and need to know whose it is.
- You are writing a config file and want to confirm the value you just pasted.
- You suspect a token you exposed and need to decide whether to rotate it now.
FAQ
Does the pasted key leave my browser?
No. The identification runs in your page and the text stays on your machine. Nothing is uploaded and nothing is stored.
How accurate is the identification?
Keys with a fixed format, like OpenAI, AWS, GitHub and Stripe, are recognized reliably. Random tokens fall back to entropy checks and come back marked with lower confidence.
It found a real key. What now?
Treat it as leaked. Rotate it in the provider's console, then run the Secret Scanner over your files to find copies. The API Key Leak Intercept extension stops the next one before it reaches a chat window.
Next step
Send the thing that needs fixing
Paste the broken workflow or the messy handoff, get the failure point and a fix path in writing. Free, no call, reply within 24 hours.
Run the free diagnostic →Stay in the loop.
Technical breakdowns, new system builds, and lessons from deploying autonomous AI. One email a week, direct to your inbox.
One email a week. Leave with one click.