Built-in Rules¶
Kingfisher ships with 734 detection rules across 465 providers (654 detectors + 80 dependent rules). Of these, 462 include live validation and 43 support direct revocation.
Search
Use the search box below to filter rules by provider name, rule ID, or confidence level.
| Provider | Rule Name | Rule ID | Confidence | Validates | Revokes |
|---|---|---|---|---|---|
| Ably | Ably API Key | kingfisher.ably.1 | Medium | Yes | |
| Abstractapi | AbstractAPI API Key | kingfisher.abstractapi.1 | Medium | Yes | |
| Abuseipdb | AbuseIPDB API Key | kingfisher.abuseipdb.1 | Medium | Yes | |
| Adafruitio | Adafruit IO Key | kingfisher.adafruitio.1 | High | Yes | |
| Adobe | Adobe Stock API Key | kingfisher.adobe.1 | Unknown | Yes | |
| Adobe | Adobe IO Product ID | kingfisher.adobe.2 | Unknown | ||
| Adobe | Adobe OAuth Client Secret | kingfisher.adobe.3 | Unknown | ||
| Age | Age Recipient (X25519 public key) | kingfisher.age.1 | High | ||
| Age | Age Identity (X22519 secret key) | kingfisher.age.2 | High | ||
| Age | Age Recipient (MLKEM768-X25519 public key) | kingfisher.age.3 | High | ||
| Age | Age Identity (MLKEM768-X25519 secret key) | kingfisher.age.4 | High | ||
| Agora | Agora App ID | kingfisher.agora.1 | Low | ||
| Agora | Agora App Certificate | kingfisher.agora.2 | Medium | ||
| Ai21 | AI21 Studio API Key | kingfisher.ai21studio.1 | Medium | Yes | |
| Ai71 | AI71 API Key | kingfisher.ai71.1 | Medium | Yes | |
| Airbrake | Airbrake User Key | kingfisher.airbrake.1 | Medium | Yes | |
| Airtable | Airtable Personal Access Token | kingfisher.airtable.1 | Medium | Yes | |
| Airtable | Airtable OAuth Token | kingfisher.airtable.2 | Medium | Yes | |
| Aiven | Aiven API Key | kingfisher.aiven.1 | Medium | Yes | |
| Akamai | Akamai API Client Token | kingfisher.akamai.1 | High | ||
| Akamai | Akamai API Client Secret | kingfisher.akamai.2 | Medium | ||
| Alchemy | Alchemy API Key | kingfisher.alchemy.1 | Medium | Yes | |
| Algolia | Algolia Admin API Key | kingfisher.algolia.1 | Medium | Yes | |
| Algolia | Algolia Application ID | kingfisher.algolia.2 | Medium | ||
| Alibaba | Alibaba Access Key ID | kingfisher.alibabacloud.1 | Medium | ||
| Alibaba | Alibaba Access Key Secret | kingfisher.alibabacloud.2 | Medium | Yes | |
| Amazonmws | Amazon MWS Auth Token | kingfisher.amazonmws.1 | High | ||
| Amplitude | Amplitude Secret Key | kingfisher.amplitude.1 | Medium | Yes | |
| Anthropic | Anthropic API Key | kingfisher.anthropic.1 | High | Yes | |
| Anthropic | Anthropic Admin API Key | kingfisher.anthropic.2 | Medium | Yes | |
| Anypoint | Anypoint API Key | kingfisher.anypoint.1 | Medium | Yes | |
| Apify | Apify API Token | kingfisher.apify.1 | High | Yes | |
| Apollo | Apollo API Key | kingfisher.apollo.1 | Medium | Yes | |
| Appcenter | Visual Studio App Center API Token | kingfisher.appcenter.1 | Medium | Yes | |
| Artifactory | Artifactory Access Token | kingfisher.artifactory.1 | High | Yes | |
| Artifactory | Artifactory JFrog URL | kingfisher.artifactory.2 | Medium | ||
| Artifactory | Artifactory Identity Reference Token | kingfisher.artifactory.3 | Medium | Yes | |
| Artifactory | Artifactory NPM Auth (base64) | kingfisher.artifactory.4 | Medium | ||
| Asana | Asana Client ID | kingfisher.asana.1 | Medium | ||
| Asana | Asana Client Secret | kingfisher.asana.2 | Medium | ||
| Asana | Asana OAuth / Personal Access Token (Legacy) | kingfisher.asana.3 | Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V1) | kingfisher.asana.4 | Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V2) | kingfisher.asana.5 | Medium | Yes | |
| Assemblyai | AssemblyAI API Key | kingfisher.assemblyai.1 | Medium | Yes | |
| Atlassian | Atlassian API token | kingfisher.atlassian.1 | Medium | Yes | |
| Atlassian | Atlassian Admin API Key | kingfisher.atlassian.3 | Medium | Yes | |
| Auth0 | Auth0 Client ID | kingfisher.auth0.1 | Medium | ||
| Auth0 | Auth0 Client Secret | kingfisher.auth0.2 | Medium | Yes | |
| Auth0 | Auth0 Domain | kingfisher.auth0.3 | Medium | ||
| Authress | Authress Service Client Access Key | kingfisher.authress.1 | Medium | Yes | |
| Aviationstack | AviationStack API Key | kingfisher.aviationstack.1 | Medium | Yes | |
| Aws | AWS Access Key ID | kingfisher.aws.1 | Medium | ||
| Aws | AWS Secret Access Key | kingfisher.aws.2 | Medium | Yes | Yes |
| Aws | AWS Session Token | kingfisher.aws.4 | Medium | ||
| Aws | AWS Bedrock API Key (Short-lived) | kingfisher.aws.6 | Medium | Yes | |
| Aws | AWS Bedrock API Key (Long-lived) | kingfisher.aws.bedrock.long_lived | Medium | Yes | |
| Azure | Azure Connection String | kingfisher.azure.1 | Medium | ||
| Azure | Azure App Configuration Connection String | kingfisher.azure.2 | Medium | ||
| Azure | Azure Personal Access Token | kingfisher.azure.3 | Medium | ||
| Azure | Azure Container Registry URL | kingfisher.azure.4 | Medium | ||
| Azure | Azure Container Registry Password | kingfisher.azure.5 | Medium | Yes | |
| Azure Notification Hub | Azure Notification Hub Namespace Host | kingfisher.azure.notificationhub.1 | Medium | ||
| Azure Notification Hub | Azure Notification Hub Name | kingfisher.azure.notificationhub.2 | Medium | ||
| Azure Notification Hub | Azure Notification Hub SAS Key Name | kingfisher.azure.notificationhub.3 | Medium | ||
| Azure Notification Hub | Azure Notification Hub Access Key | kingfisher.azure.notificationhub.4 | Medium | Yes | |
| Azuredevops | Azure DevOps Organization | kingfisher.azure.devops.1 | Medium | ||
| Azuredevops | Azure DevOps Personal Access Token | kingfisher.azure.devops.2 | Medium | Yes | |
| Azureopenai | Azure OpenAI API Key | kingfisher.azureopenai.1 | Medium | Yes | |
| Azureopenai | Azure OpenAI Host | kingfisher.azureopenai.host.1 | Medium | ||
| Azuresearchquery | Azure Search Query Key | kingfisher.azuresearch.key.1 | Medium | Yes | |
| Azuresearchquery | Azure Search URL | kingfisher.azuresearch.url.1 | Medium | ||
| Azurespeech | Azure Speech Region | kingfisher.azurespeech.1 | Medium | ||
| Azurespeech | Azure Speech API Key | kingfisher.azurespeech.2 | Medium | Yes | |
| Azurestorage | Azure Storage Account Name | kingfisher.azurestorage.1 | Medium | ||
| Azurestorage | Azure Storage Account Key | kingfisher.azurestorage.2 | Medium | Yes | |
| Azuretranslator | Azure Translator Region | kingfisher.azuretranslator.1 | Medium | ||
| Azuretranslator | Azure Translator API Key | kingfisher.azuretranslator.2 | Medium | Yes | |
| Baremetrics | Baremetrics API Key | kingfisher.baremetrics.1 | Medium | Yes | |
| Baseten | Baseten API Key | kingfisher.baseten.1 | Medium | Yes | |
| Beamer | Beamer API token | kingfisher.beamer.1 | Medium | Yes | |
| Betterstack | Better Stack API Token | kingfisher.betterstack.1 | Medium | Yes | |
| Bitbucket | Bitbucket Client ID | kingfisher.bitbucket.1 | Medium | Yes | |
| Bitbucket | Bitbucket Secret | kingfisher.bitbucket.3 | Medium | Yes | |
| Bitfinex | Bitfinex API Key | kingfisher.bitfinex.1 | Low | ||
| Bitfinex | Bitfinex API Secret | kingfisher.bitfinex.2 | Medium | ||
| Bitly | Bitly Access Token | kingfisher.bitly.1 | Medium | Yes | |
| Blynk | Blynk Device Access Token | kingfisher.blynk.1 | Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.2 | Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.3 | Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.8 | Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.9 | Medium | ||
| Box | Box API Access Token | kingfisher.box.1 | Medium | Yes | |
| Braintree | Braintree Tokenization Key | kingfisher.braintree.1 | Medium | ||
| Branchio | Branch.io Live Key | kingfisher.branchio.1 | Medium | Yes | |
| Branchio | Branch.io Test Key | kingfisher.branchio.2 | Medium | ||
| Branchio | Branch.io Secret | kingfisher.branchio.3 | Medium | ||
| Brave | Brave Search API Key | kingfisher.brave.1 | Medium | Yes | |
| Brevo | Brevo API Token | kingfisher.brevo.1 | High | Yes | |
| Browserstack | BrowserStack Access Key | kingfisher.browserstack.1 | Medium | Yes | Yes |
| Browserstack | BrowserStack Username | kingfisher.browserstack.2 | Medium | ||
| Buildkite | Buildkite API Key | kingfisher.buildkite.1 | Medium | Yes | Yes |
| Bunnynet | Bunny.net API Key | kingfisher.bunnynet.1 | Medium | Yes | |
| Calendly | Calendly Personal Access Token | kingfisher.calendly.1 | Medium | Yes | |
| Carto | CARTO API Access Token (JWT) | kingfisher.carto.1 | Medium | ||
| Cerebras | Cerebras AI API Key | kingfisher.cerebras.1 | High | Yes | |
| Checkout | Checkout.com Secret Key | kingfisher.checkout.1 | High | Yes | |
| Checkout | Checkout.com Sandbox Secret Key | kingfisher.checkout.2 | High | Yes | |
| Circleci | CircleCI API Personal Access Token | kingfisher.circleci.1 | High | Yes | |
| Circleci | CircleCI API Project Token | kingfisher.circleci.2 | Medium | Yes | |
| Ciscomeraki | Cisco Meraki API Key | kingfisher.ciscomeraki.1 | Medium | Yes | |
| Clarifai | Clarifai API Key | kingfisher.clarifai.1 | Medium | Yes | |
| Clay | Clay API Key | kingfisher.clay.1 | Medium | ||
| Clearbit | Clearbit API Key | kingfisher.clearbit.1 | Medium | Yes | |
| Clearout | Clearout API Token | kingfisher.clearout.1 | Medium | Yes | |
| Clerk | Clerk Secret Key | kingfisher.clerk.1 | Medium | Yes | |
| Clickhouse | ClickHouse Cloud Secret Key | kingfisher.clickhouse.1 | High | Yes | |
| Clickhouse | ClickHouse Cloud Key ID | kingfisher.clickhouse.2 | Medium | ||
| Clockwork | Clockwork SMS API Key | kingfisher.clockwork.1 | Medium | Yes | |
| Clojars | Clojars Username | kingfisher.clojars.1 | Medium | ||
| Clojars | Clojars API Token | kingfisher.clojars.2 | Medium | ||
| Cloudant | IBM Cloudant Legacy Credentials | kingfisher.cloudant.1 | High | ||
| Cloudflare | Cloudflare API Token | kingfisher.cloudflare.1 | Medium | Yes | Yes |
| Cloudflare | Cloudflare CA Key | kingfisher.cloudflare.2 | Medium | Yes | |
| Cloudinary | Cloudinary API Secret | kingfisher.cloudinary.1 | Medium | Yes | |
| Cloudinary | Cloudinary API Key | kingfisher.cloudinary.2 | Medium | ||
| Cloudinary | Cloudinary Cloud Name | kingfisher.cloudinary.3 | Medium | ||
| Cloudsight | CloudSight API Key | kingfisher.cloudsight.1 | Medium | Yes | |
| Codacy | Codacy API Key | kingfisher.codacy.1 | Medium | Yes | |
| Codeclimate | CodeClimate Reporter ID | kingfisher.codeclimate.1 | Medium | Yes | |
| Codecov | Codecov Access Token | kingfisher.codecov.1 | Medium | Yes | |
| Coderabbit | CodeRabbit API Key | kingfisher.coderabbit.1 | Medium | Yes | |
| Cohere | Cohere API Key | kingfisher.cohere.1 | Medium | Yes | |
| Coinbase | Coinbase Access Token | kingfisher.coinbase.1 | Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (ECDSA) | kingfisher.coinbase.2 | Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (Ed25519) | kingfisher.coinbase.3 | Unknown | Yes | |
| Coinlayer | Coinlayer API Key | kingfisher.coinlayer.1 | Medium | Yes | |
| Confluent | Confluent Client ID | kingfisher.confluent.1 | Medium | ||
| Confluent | Confluent API Secret | kingfisher.confluent.2 | Medium | Yes | Yes |
| Confluent | Confluent API Secret - Updated Format | kingfisher.confluent.3 | Medium | Yes | Yes |
| Contentful | Contentful Delivery API Token | kingfisher.contentful.1 | Medium | Yes | |
| Contentful | Contentful Personal Access Token | kingfisher.contentful.2 | Medium | Yes | |
| Contentstack | Contentstack Management Token | kingfisher.contentstack.1 | Medium | Yes | |
| Contentstack | Contentstack API Key | kingfisher.contentstack.2 | Medium | ||
| Couchbase | Couchbase Capella API Key | kingfisher.couchbase.1 | Medium | Yes | |
| Coveralls | Coveralls Repo Identifier | kingfisher.coveralls.1 | Medium | ||
| Coveralls | Coveralls Personal API Token | kingfisher.coveralls.2 | Medium | Yes | |
| Coze | Coze Personal Access Token | kingfisher.coze.1 | Medium | Yes | |
| Crates.Io | crates.io API Key | kingfisher.cratesio.1 | Medium | ||
| Credentials | Credentials in a URL | kingfisher.credentials.1 | Medium | ||
| Curl | Curl Basic Authentication Credentials | kingfisher.curl.1 | Low | ||
| Curl | Curl Header Authentication | kingfisher.curl.2 | Low | ||
| Currencylayer | Currencylayer API Key | kingfisher.currencylayer.1 | Medium | Yes | |
| Cursor | Cursor Integrations (User) API Key | kingfisher.cursor.1 | Medium | Yes | |
| Customerio | Customer.io Tracking API Key | kingfisher.customerio.1 | Medium | ||
| Customerio | Customer.io App API Key | kingfisher.customerio.2 | Medium | Yes | |
| Cypress | Cypress Record Key | kingfisher.cypress.1 | Medium | Yes | |
| Cypress | Cypress Project ID | kingfisher.cypress.2 | Medium | ||
| Daily | Daily API Key | kingfisher.daily.1 | Medium | Yes | |
| Databento | Databento API Key | kingfisher.databento.1 | Medium | Yes | |
| Databricks | Databricks API token | kingfisher.databricks.1 | Medium | ||
| Databricks | Databricks API Token | kingfisher.databricks.2 | Medium | Yes | |
| Databricks | Databricks Domain | kingfisher.databricks.3 | Medium | ||
| Datadog | Datadog Site Domain | kingfisher.datadog.1 | Medium | ||
| Datadog | Datadog API Key | kingfisher.datadog.2 | Medium | Yes | |
| Datadog | Datadog Application Key | kingfisher.datadog.3 | Medium | Yes | |
| Datagov | Data.gov API Key | kingfisher.datagov.1 | Medium | Yes | |
| Datastax | DataStax Astra Application Token | kingfisher.datastax.1 | Medium | Yes | |
| Db2 | IBM DB2 / AS400 Credentials | kingfisher.db2.1 | Medium | ||
| Deepgram | Deepgram API Key | kingfisher.deepgram.1 | Medium | Yes | |
| Deepseek | DeepSeek API Key | kingfisher.deepseek.1 | Medium | Yes | |
| Definednetworking | Defined Networking API Token | kingfisher.definednetworking.1 | Medium | Yes | |
| Delighted | Delighted API Key | kingfisher.delighted.1 | Medium | Yes | |
| Deno | Deno Account Token | kingfisher.deno.1 | Medium | Yes | |
| Dependency Track | Dependency-Track API Key | kingfisher.dtrack.1 | Medium | ||
| Devcycle | DevCycle Client SDK Key | kingfisher.devcycle.1 | Medium | Yes | |
| Devcycle | DevCycle Mobile SDK Key | kingfisher.devcycle.2 | Medium | Yes | |
| Devcycle | DevCycle Server SDK Key | kingfisher.devcycle.3 | Medium | Yes | |
| Deviantart | DeviantArt Access Token | kingfisher.deviantart.1 | Medium | Yes | Yes |
| Diffbot | Diffbot API Key | kingfisher.diffbot.1 | Unknown | Yes | |
| Dify | Dify API Key | kingfisher.dify.1 | Medium | Yes | |
| Digitalocean | DigitalOcean API Key | kingfisher.digitalocean.1 | Medium | Yes | |
| Digitalocean | DigitalOcean Refresh Token | kingfisher.digitalocean.2 | Medium | Yes | |
| Discord | Discord Webhook URL | kingfisher.discord.1 | Medium | Yes | |
| Discord | Discord Bot Token | kingfisher.discord.2 | Medium | Yes | |
| Discord | Discord Bot ID | kingfisher.discord.3 | Medium | ||
| Disqus | Disqus API Key | kingfisher.disqus.1 | Medium | Yes | |
| Django | Django Secret Key | kingfisher.django.1 | Medium | ||
| Docker | Docker Registry Credentials (auths JSON) | kingfisher.docker.1 | Medium | Yes | |
| Dockerhub | Docker Hub Personal Access Token | kingfisher.dockerhub.1 | Medium | Yes | |
| Dockerhub | Docker Hub Username | kingfisher.dockerhub.2 | Medium | ||
| Dockerhub | Docker Hub Organization Access Token | kingfisher.dockerhub.3 | Medium | Yes | |
| Docusign | DocuSign API Secret Key | kingfisher.docusign.1 | Medium | ||
| Doppler | Doppler CLI Token | kingfisher.doppler.1 | Medium | Yes | Yes |
| Doppler | Doppler Personal Token | kingfisher.doppler.2 | Medium | Yes | Yes |
| Doppler | Doppler Service Token | kingfisher.doppler.3 | Medium | Yes | Yes |
| Doppler | Doppler Service Account Token | kingfisher.doppler.4 | Medium | Yes | Yes |
| Doppler | Doppler SCIM Token | kingfisher.doppler.5 | Medium | Yes | Yes |
| Doppler | Doppler Audit Token | kingfisher.doppler.6 | Medium | Yes | Yes |
| Droneci | DroneCI Access Token | kingfisher.drone.1 | Medium | Yes | |
| Dropbox | Dropbox API secret/key | kingfisher.dropbox.1 | Medium | Yes | |
| Duffel | Duffel API Token | kingfisher.duffel.1 | High | Yes | |
| Duo | Duo Security Integration Key | kingfisher.duo.1 | Low | ||
| Duo | Duo Security Secret Key | kingfisher.duo.2 | Medium | ||
| Duplocloud | DuploCloud API Key | kingfisher.duplocloud.1 | Medium | ||
| Dwolla | Dwolla Client ID | kingfisher.dwolla.1 | Medium | ||
| Dwolla | Dwolla Client Secret | kingfisher.dwolla.2 | Medium | ||
| Dynatrace | Dynatrace Token | kingfisher.dynatrace.1 | Medium | Yes | |
| Easypost | EasyPost API token | kingfisher.easypost.1 | Medium | Yes | |
| Elasticemail | Elastic Email API Key | kingfisher.elasticemail.1 | Medium | Yes | |
| Elevenlabs | ElevenLabs API Key | kingfisher.elevenlabs.1 | Medium | Yes | |
| Endorlabs | Endor Labs API Key | kingfisher.endorlabs.1 | Medium | ||
| Endorlabs | Endor Labs API Secret | kingfisher.endorlabs.2 | Medium | Yes | |
| Equinix | Equinix Metal / Packet API Token | kingfisher.equinix.1 | High | Yes | |
| Eraserio | Eraser API Key | kingfisher.eraser.1 | Medium | Yes | |
| Etsy | Etsy Open API Key | kingfisher.etsy.1 | Medium | Yes | |
| Eventbrite | Eventbrite API Key | kingfisher.eventbrite.1 | Medium | Yes | |
| Exaai | Exa AI API Key | kingfisher.exa.1 | Medium | Yes | |
| Facebook App ID | kingfisher.facebook.1 | Medium | |||
| Facebook Secret Key | kingfisher.facebook.2 | Unknown | Yes | ||
| Facebook Access Token | kingfisher.facebook.3 | Medium | |||
| Fastly | Fastly API token | kingfisher.fastly.1 | Medium | Yes | |
| Fernet | Fernet Symmetric Encryption Key | kingfisher.fernet.1 | High | ||
| Figma | Figma Personal Access Token | kingfisher.figma.1 | Medium | Yes | |
| Figma | Figma Personal Access Header Token | kingfisher.figma.2 | Unknown | Yes | |
| Fileio | FileIO Secret Key | kingfisher.fileio.1 | Medium | Yes | |
| Filezilla | FileZilla base64 encoded password | kingfisher.filezilla.1 | Low | ||
| Filezilla | FileZilla stored password (Pass plaintext) | kingfisher.filezilla.2 | Low | ||
| Finicity | Finicity API token | kingfisher.finicity.1 | Medium | Yes | |
| Finicity | Finicity client secret | kingfisher.finicity.2 | Medium | Yes | |
| Finnhub | Finnhub API Token | kingfisher.finnhub.1 | Medium | Yes | |
| Firebase | Firebase Cloud Messaging Server Key | kingfisher.firebase.1 | Medium | ||
| Firebase | Firebase Cloud Messaging Device Token | kingfisher.firebase.2 | Medium | ||
| Firecrawl | Firecrawl API Key | kingfisher.firecrawl.1 | Medium | Yes | |
| Fireworksai | Fireworks.ai API Key | kingfisher.fireworks.1 | Medium | Yes | |
| Fixer | Fixer.io API Key | kingfisher.fixer.1 | Medium | Yes | |
| Fleetbase | Fleetbase API Key | kingfisher.fleetbase.1 | Medium | Yes | |
| Flickr | Flickr API Key | kingfisher.flickr.1 | Medium | Yes | |
| Flickr | Flickr OAuth Token | kingfisher.flickr.2 | Medium | Yes | |
| Flutterwave | Flutterwave Public Key | kingfisher.flutterwave.1 | Medium | ||
| Flutterwave | Flutterwave Secret Key | kingfisher.flutterwave.2 | Medium | ||
| Flyio | Fly.io API Token | kingfisher.flyio.1 | Medium | Yes | |
| Forestadmin | Forest Admin Auth Secret | kingfisher.forestadmin.1 | High | ||
| Foursquare | Foursquare Client ID | kingfisher.foursquare.1 | Medium | ||
| Foursquare | Foursquare Client Secret | kingfisher.foursquare.2 | Medium | Yes | |
| Frameio | Frame.io API Token | kingfisher.frameio.1 | Medium | Yes | |
| Freemius | Freemius Secret Key | kingfisher.freemius.1 | Medium | ||
| Freshbooks | FreshBooks Access Token | kingfisher.freshbooks.1 | Medium | Yes | |
| Freshdesk | Freshdesk Domain | kingfisher.freshdesk.1 | Medium | ||
| Freshdesk | Freshdesk API Key | kingfisher.freshdesk.2 | Medium | Yes | |
| Friendli | Friendli.ai API Key | kingfisher.friendli.1 | Medium | Yes | |
| Ftp | FTP Connection URI Credentials | kingfisher.ftp.1 | Medium | ||
| Fullcontact | FullContact API Key | kingfisher.fullcontact.1 | Medium | Yes | |
| Fullstory | Fullstory API Key | kingfisher.fullstory.1 | Medium | Yes | |
| Gcnotify | GC Notify API Key | kingfisher.gcnotify.1 | Medium | Yes | |
| Gcp | GCP API Token | kingfisher.gcp.1 | High | Yes | Yes |
| Gcp | GCP Private Key ID | kingfisher.gcp.3 | Medium | ||
| Gemfury | Gemfury Deploy or Push Token | kingfisher.gemfury.1 | High | ||
| Gemfury | Gemfury Full Access Token | kingfisher.gemfury.2 | High | ||
| Gemstash | Gemstash API Key | kingfisher.gemstash.1 | High | ||
| Generic | Generic Secret | kingfisher.generic.1 | Low | ||
| Generic | Generic API Key | kingfisher.generic.2 | Low | ||
| Generic | Generic Username and Password | kingfisher.generic.3 | Low | ||
| Generic | Generic Username and Password | kingfisher.generic.4 | Low | ||
| Generic | Generic Password | kingfisher.generic.5 | Low | ||
| Generic | Weak Password Pattern | kingfisher.generic.6 | Low | ||
| Generic | Generic Username and Password | kingfisher.generic.8 | Low | ||
| Generic | Docker Robot Credentials (plaintext pair) | kingfisher.generic.9 | Low | ||
| Geoapify | Geoapify API Key | kingfisher.geoapify.1 | Medium | Yes | |
| Gitalk | Gitalk OAuth Credentials | kingfisher.gitalk.1 | Medium | ||
| Gitea | Gitea Access Token | kingfisher.gitea.1 | Medium | Yes | |
| Github | GitHub Personal Access Token - fine-grained permissions | kingfisher.github.1 | Unknown | Yes | Yes |
| Github | GitHub Personal Access Token | kingfisher.github.2 | Unknown | Yes | Yes |
| Github | GitHub OAuth Access Token | kingfisher.github.3 | Medium | Yes | |
| Github | GitHub App User-to-Server Token | kingfisher.github.4 | Unknown | Yes | |
| Github | GitHub App Server-to-Server Token | kingfisher.github.5 | Unknown | Yes | Yes |
| Github | GitHub Refresh Token | kingfisher.github.6 | Unknown | Yes | |
| Github | GitHub Client ID | kingfisher.github.7 | Unknown | ||
| Github | GitHub Legacy Secret Key | kingfisher.github.8 | Unknown | Yes | |
| Gitlab | GitLab Private Token | kingfisher.gitlab.1 | Medium | Yes | Yes |
| Gitlab | GitLab Runner Registration Token | kingfisher.gitlab.2 | Unknown | Yes | |
| Gitlab | GitLab Pipeline Trigger Token | kingfisher.gitlab.3 | Unknown | Yes | |
| Gitlab | GitLab Private Token - Routable Format | kingfisher.gitlab.4 | Medium | Yes | Yes |
| Gitter | Gitter Access Token | kingfisher.gitter.1 | Medium | Yes | |
| Gocardless | GoCardless API Token | kingfisher.gocardless.1 | Medium | Yes | |
| Godaddy | GoDaddy API Credentials | kingfisher.godaddy.1 | Medium | Yes | |
| Google Client ID | kingfisher.google.1 | Medium | |||
| Google OAuth Client Secret | kingfisher.google.2 | Medium | |||
| Google OAuth Client Secret | kingfisher.google.3 | Medium | |||
| Google OAuth Access Token | kingfisher.google.4 | Medium | |||
| Google OAuth Credentials | kingfisher.google.6 | Medium | |||
| Google Gemini API Key | kingfisher.google.7 | Medium | Yes | ||
| Googleoauth2 | Google OAuth2 Access Token | kingfisher.google.oauth2.1 | Medium | Yes | |
| Gradle | Hardcoded Gradle Credentials | kingfisher.gradle.1 | Medium | ||
| Grafana | Grafana API Token | kingfisher.grafana.1 | Medium | Yes | |
| Grafana | Grafana Cloud API Token | kingfisher.grafana.2 | Medium | Yes | |
| Grafana | Grafana Service Account Token | kingfisher.grafana.3 | Medium | Yes | |
| Grafana | Grafana Domain | kingfisher.grafana.4 | Medium | ||
| Groq | Groq API Key | kingfisher.groq.1 | High | Yes | |
| Guardian | Guardian API Key | kingfisher.guardian.1 | Medium | Yes | |
| Gumroad | Gumroad Access Token | kingfisher.gumroad.1 | Medium | Yes | |
| Harness | Harness Personal Access Token (PAT) | kingfisher.harness.pat.1 | Medium | Yes | Yes |
| Hashes | Password Hash (Kerberos 5, etype 23, AS-REP) | kingfisher.krb5.asrep.23.1 | Medium | ||
| Hashes | Password Hash (md5crypt) | kingfisher.pwhash.1 | Medium | ||
| Hashes | Password Hash (bcrypt) | kingfisher.pwhash.2 | Medium | ||
| Hashes | Password Hash (sha256crypt) | kingfisher.pwhash.3 | Medium | ||
| Hashes | Password Hash (sha512crypt) | kingfisher.pwhash.4 | Medium | ||
| Hashes | Password Hash (Cisco IOS PBKDF2 with SHA256) | kingfisher.pwhash.5 | Medium | ||
| Hashicorp | Hashicorp Vault Service Token (< v1.10) | kingfisher.hashicorp.1 | Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (< v1.10) | kingfisher.hashicorp.2 | Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (< v1.10) | kingfisher.hashicorp.3 | Medium | ||
| Hashicorp | Hashicorp Vault Service Token (>= v1.10) | kingfisher.hashicorp.4 | Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (>= v1.10) | kingfisher.hashicorp.5 | Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (>= v1.10) | kingfisher.hashicorp.6 | Medium | ||
| Hashicorp | Hashicorp Vault Unseal Key | kingfisher.hashicorp.7 | Medium | ||
| Heartland | Heartland Portico API Key | kingfisher.heartland.1 | High | Yes | |
| Helpscout | Help Scout Client ID | kingfisher.helpscout.1 | Medium | ||
| Helpscout | Help Scout OAuth Client Secret | kingfisher.helpscout.2 | Medium | Yes | |
| Hereapi | HERE API Key | kingfisher.hereapi.1 | Medium | Yes | |
| Heroku | Heroku API Key | kingfisher.heroku.1 | Medium | Yes | Yes |
| Heroku | Heroku API Key (Platform Key) | kingfisher.heroku.2 | Medium | Yes | Yes |
| Honeycomb | Honeycomb API Key | kingfisher.honeycomb.1 | Medium | Yes | |
| Http | HTTP Basic Authentication | kingfisher.http.1 | Low | ||
| Http | HTTP Bearer Token | kingfisher.http.2 | Low | ||
| Huawei | Huawei Open Platform Client ID | kingfisher.huawei.1 | Low | ||
| Huawei | Huawei Open Platform Client Secret | kingfisher.huawei.2 | Medium | ||
| Hubspot | HubSpot Private App Token | kingfisher.hubspot.1 | Medium | Yes | |
| Huggingface | HuggingFace User Access Token | kingfisher.huggingface.1 | Medium | Yes | |
| Hunterio | Hunter.io API Key | kingfisher.hunterio.1 | Medium | Yes | |
| Ibm | IBM Cloud User API Key | kingfisher.ibm.1 | Medium | Yes | |
| Imagekit | ImageKit Private API Key | kingfisher.imagekit.1 | Medium | Yes | |
| Influxdb | InfluxDB API Token | kingfisher.influxdb.1 | Medium | Yes | |
| Infracost | Infracost API Token | kingfisher.infracost.1 | High | Yes | |
| Infura | Infura API Key | kingfisher.infura.1 | Medium | Yes | |
| Instagram Graph API Access Token | kingfisher.instagram.1 | High | Yes | ||
| Instantly | Instantly API Key | kingfisher.instantly.1 | Medium | Yes | |
| Intercom | Intercom API Token | kingfisher.intercom.1 | Medium | Yes | |
| Intra42 | Intra42 Client ID | kingfisher.intra42.1 | Medium | ||
| Intra42 | Intra42 Client Secret (s-s4t2ud/af) | kingfisher.intra42.2 | Medium | Yes | |
| Ionic | Ionic API token | kingfisher.ionic.1 | High | Yes | |
| Ipstack | IpStack API Key | kingfisher.ipstack.1 | Medium | Yes | |
| Iterable | Iterable API Key | kingfisher.iterable.1 | Medium | Yes | |
| Jdbc | JDBC connection string with embedded credentials | kingfisher.jdbc.1 | Medium | Yes | |
| Jenkins | Jenkins Token or Crumb | kingfisher.jenkins.1 | Medium | ||
| Jfrog | JFrog Cloud Host | kingfisher.jfrog.1 | Medium | ||
| Jfrog | JFrog API Key | kingfisher.jfrog.2 | Medium | Yes | |
| Jfrog | JFrog Identity Token | kingfisher.jfrog.3 | Medium | Yes | |
| Jina | Jina Search Foundation API Key | kingfisher.jina.1 | High | Yes | |
| Jira | Jira Domain | kingfisher.jira.1 | Medium | ||
| Jira | Jira Token | kingfisher.jira.2 | Medium | Yes | |
| Jotform | Jotform API Key | kingfisher.jotform.1 | Medium | Yes | |
| Jumpcloud | Jumpcloud API Key | kingfisher.jumpcloud.1 | Medium | Yes | |
| Jwt | JSON Web Token (base64url-encoded) | kingfisher.jwt.1 | Medium | Yes | |
| Kagi | Kagi API Key | kingfisher.kagi.1 | Medium | Yes | |
| Kairos | Kairos API App ID | kingfisher.kairos.1 | Low | ||
| Kairos | Kairos API Key | kingfisher.kairos.2 | Medium | ||
| Keenio | Keen.io API Key | kingfisher.keenio.1 | Medium | Yes | |
| Keenio | Keen.io Project ID | kingfisher.keenio.2 | Medium | ||
| Keycloak | Keycloak Client ID | kingfisher.keycloak.1 | Low | ||
| Keycloak | Keycloak Client Secret | kingfisher.keycloak.2 | Medium | ||
| Kickbox | Kickbox API Key | kingfisher.kickbox.1 | Medium | Yes | |
| Klaviyo | Klaviyo API Key | kingfisher.klaviyo.1 | Medium | Yes | |
| Klingai | Kling AI Secret Key | kingfisher.klingai.1 | Medium | Yes | |
| Kraken | Kraken API Secret | kingfisher.kraken.1 | Medium | ||
| Kubernetes | Kubernetes API Server URL | kingfisher.kubernetes.1 | Medium | ||
| Kubernetes | Kubernetes Bootstrap Token | kingfisher.kubernetes.2 | Medium | Yes | |
| Kubernetes | Kubernetes Bootstrap Token Pair | kingfisher.kubernetes.3 | Medium | Yes | |
| Kucoin | KuCoin API Key | kingfisher.kucoin.1 | Medium | ||
| Kucoin | KuCoin API Secret | kingfisher.kucoin.2 | Medium | ||
| Lacework | Lacework API Key ID | kingfisher.lacework.1 | Medium | ||
| Lacework | Lacework API Secret | kingfisher.lacework.2 | High | ||
| Langchain | LangSmith Personal Access Token | kingfisher.langchain.1 | Unknown | Yes | |
| Langchain | LangSmith Service Key | kingfisher.langchain.2 | Unknown | Yes | |
| Langfuse | Langfuse Secret Key | kingfisher.langfuse.1 | Medium | Yes | |
| Langfuse | Langfuse Public Key | kingfisher.langfuse.2 | Medium | ||
| Laravel | Laravel Application Encryption Key | kingfisher.laravel.1 | High | ||
| Lark | LarkSuite Tenant Access Token | kingfisher.lark.1 | Medium | Yes | |
| Lark | LarkSuite User Access Token | kingfisher.lark.2 | Medium | Yes | |
| Lark | LarkSuite App Access Token | kingfisher.lark.3 | Medium | Yes | |
| Launchdarkly | LaunchDarkly Access Token | kingfisher.launchdarkly.1 | Medium | Yes | |
| Ldap | LDAP Credentials | kingfisher.ldap.1 | Medium | ||
| Lemonsqueezy | LemonSqueezy API Key | kingfisher.lemonsqueezy.1 | Medium | Yes | |
| Line | Line Messaging API Token | kingfisher.line.1 | Medium | Yes | |
| Linear | Linear API Key | kingfisher.linear.1 | Medium | Yes | |
| LinkedIn Client ID | kingfisher.linkedin.1 | Medium | Yes | ||
| LinkedIn Secret Key | kingfisher.linkedin.2 | Medium | Yes | ||
| Linode | Linode Personal Access Token | kingfisher.linode.1 | Medium | Yes | |
| Llamacloud | Llama Cloud API Key | kingfisher.llamacloud.1 | High | ||
| Lob | Lob API Key | kingfisher.lob.1 | Medium | Yes | |
| Lob | Lob Publishable API Key | kingfisher.lob.2 | Medium | Yes | |
| Lokalise | Lokalise API Token | kingfisher.lokalise.1 | Medium | Yes | |
| Looker | Looker Base URL | kingfisher.looker.1 | Low | ||
| Looker | Looker Client ID | kingfisher.looker.2 | Medium | ||
| Looker | Looker Client Secret | kingfisher.looker.3 | Medium | Yes | |
| Mailchimp | Mailchimp API Key | kingfisher.mailchimp.1 | Medium | Yes | |
| Mailgun | MailGun Token | kingfisher.mailgun.1 | Medium | Yes | |
| Mailgun | MailGun Primary Key | kingfisher.mailgun.2 | Medium | Yes | |
| Mailjet | MailJetSMS API Key | kingfisher.mailjet.1 | Medium | Yes | |
| Mailjet | MailJet Basic Auth | kingfisher.mailjet.2 | Medium | Yes | |
| Mandrill | Mandrill API Key | kingfisher.mandrill.1 | Medium | Yes | |
| Mapbox | Mapbox Public Access Token | kingfisher.mapbox.1 | Medium | Yes | |
| Mapbox | Mapbox Secret Access Token | kingfisher.mapbox.2 | Medium | Yes | Yes |
| Mapbox | Mapbox Temporary Access Token | kingfisher.mapbox.3 | Medium | Yes | |
| Mariadb | MariaDB Credentials | kingfisher.mariadb.1 | Medium | ||
| Mattermost | Mattermost URL | kingfisher.mattermost.1 | Medium | ||
| Mattermost | Mattermost Access Token | kingfisher.mattermost.2 | Medium | Yes | |
| Maxmind | MaxMind License Key | kingfisher.maxmind.1 | Medium | Yes | |
| Maxmind | MaxMind Account ID | kingfisher.maxmind.2 | Medium | ||
| Mercadopago | Mercado Pago Access Token | kingfisher.mercadopago.1 | Medium | Yes | |
| Mercury | Mercury Production API Token | kingfisher.mercury.1 | Medium | Yes | |
| Mercury | Mercury Non-Production API Token | kingfisher.mercury.2 | Medium | Yes | |
| Mergify | Mergify Application API Key | kingfisher.mergify.1 | High | Yes | |
| Messagebird | MessageBird API Token | kingfisher.messagebird.1 | Medium | Yes | |
| Microsoft Teams | Microsoft Teams Webhook | kingfisher.msteams.1 | Medium | Yes | |
| Microsoftteamswebhook | Microsoft Teams Webhook | kingfisher.microsoftteamswebhook.1 | Medium | Yes | |
| Midtrans | Midtrans Sandbox Server/Client Key | kingfisher.midtrans.1 | High | Yes | |
| Midtrans | Midtrans Production Server/Client Key | kingfisher.midtrans.2 | High | Yes | |
| Miro | Miro Access Token | kingfisher.miro.1 | Medium | Yes | |
| Mistral | Mistral AI API Key | kingfisher.mistral.1 | Medium | Yes | |
| Mixpanel | Mixpanel API Secret | kingfisher.mixpanel.1 | Medium | Yes | |
| Modal | Modal CLI Token Pair | kingfisher.modal.1 | High | Yes | |
| Monday | Monday.com API Key | kingfisher.monday.1 | Medium | Yes | |
| Moneywave | Moneywave / Flutterwave Private Key | kingfisher.moneywave.1 | High | ||
| Mongodb | MongoDB API Private Key | kingfisher.mongodb.1 | Unknown | Yes | Yes |
| Mongodb | MongoDB API PUBLIC Key | kingfisher.mongodb.2 | Medium | ||
| Mongodb | MongoDB URI Connection String | kingfisher.mongodb.3 | Unknown | Yes | |
| Mongodb | MongoDB Atlas Service Account Token | kingfisher.mongodb.4 | Unknown | Yes | |
| Mssql | MSSQL Credentials | kingfisher.mssql.1 | Medium | ||
| Mux | Mux Access Token Secret | kingfisher.mux.1 | Medium | Yes | |
| Mux | Mux Access Token ID | kingfisher.mux.2 | Medium | ||
| Mysql | MySQL URI with Credentials | kingfisher.mysql.1 | Medium | Yes | |
| Nasa | NASA API Key | kingfisher.nasa.1 | Unknown | Yes | |
| Neo4J | Neo4j Database Credentials | kingfisher.neo4j.1 | Medium | ||
| Neon | Neon API Key | kingfisher.neon.1 | High | Yes | |
| Nessus | Nessus Agent Linking Key | kingfisher.nessus.1 | High | ||
| Netlify | Netlify API Key | kingfisher.netlify.1 | Unknown | Yes | |
| Netlify | Netlify API Key | kingfisher.netlify.2 | Medium | Yes | |
| Netrc | netrc Credentials | kingfisher.netrc.1 | Medium | ||
| Newrelic | New Relic Personal API Key | kingfisher.newrelic.1 | Medium | Yes | |
| Newsapi | NewsAPI API Key | kingfisher.newsapi.1 | Medium | Yes | |
| Ngrok | Ngrok API Key | kingfisher.ngrok.1 | Unknown | Yes | |
| Notion | Notion Legacy Token | kingfisher.notion.1 | Medium | Yes | |
| Notion | Notion Token | kingfisher.notion.2 | Medium | Yes | |
| Notion | Notion OAuth Refresh Token | kingfisher.notion.3 | Medium | ||
| Npm | NPM Access Token (fine-grained) | kingfisher.npm.1 | Medium | Yes | Yes |
| Npm | NPM Access Token (old format) | kingfisher.npm.2 | Medium | Yes | Yes |
| Nuget | NuGet API Key | kingfisher.nuget.1 | Medium | Yes | |
| Nuget | NuGet API Key | kingfisher.nuget.2 | Medium | Yes | |
| Numverify | Numverify API Key | kingfisher.numverify.1 | Medium | Yes | |
| Nvidia | NVIDIA NIM API Key | kingfisher.nvidia.nim.1 | Medium | Yes | |
| Nxcloud | Nx Cloud Access Token | kingfisher.nxcloud.1 | High | Yes | |
| Nylas | Nylas API Key | kingfisher.nylas.1 | Medium | Yes | |
| Nylas | Nylas API URI | kingfisher.nylas.api_uri.1 | Medium | ||
| Nytimes | New York Times API Key | kingfisher.nytimes.1 | Medium | Yes | |
| Octopusdeploy | Octopus Deploy Server URL | kingfisher.octopusdeploy.1 | Medium | ||
| Octopusdeploy | Octopus Deploy API Key | kingfisher.octopusdeploy.2 | Medium | Yes | |
| Odbc | Credentials in ODBC Connection String | kingfisher.odbc.1 | Medium | ||
| Okta | Okta API Token | kingfisher.okta.1 | Unknown | Yes | |
| Okta | Okta Domain | kingfisher.okta.2 | Unknown | ||
| Ollama | Ollama API Key | kingfisher.ollama.1 | Medium | Yes | |
| Onepassword | 1Password Service-Account Token | kingfisher.1password.1 | Medium | Yes | |
| Onepassword | 1Password Account Secret Key | kingfisher.1password.2 | Medium | ||
| Onesignal | OneSignal REST API Key | kingfisher.onesignal.1 | Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.1 | Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.2 | Medium | Yes | |
| Openai | OpenAI API Key (Short Prefixed) | kingfisher.openai.3 | Medium | Yes | |
| Openrouter | OpenRouter API Key | kingfisher.openrouter.1 | Medium | Yes | |
| Openshift | OpenShift API Server URL | kingfisher.openshift.1 | Medium | ||
| Openshift | OpenShift OAuth Access Token | kingfisher.openshift.2 | Medium | Yes | |
| Openweathermap | OpenWeather Map API Key | kingfisher.openweather.1 | Medium | Yes | |
| Opsgenie | OpsGenie API Key | kingfisher.opsgenie.1 | Unknown | Yes | |
| Optimizely | Optimizely Personal Access Token | kingfisher.optimizely.1 | Medium | Yes | |
| Oracle | Oracle Database Connection URI | kingfisher.oracle.1 | Medium | ||
| Ovh | OVH Application Key | kingfisher.ovh.1 | Low | ||
| Ovh | OVH Application Secret | kingfisher.ovh.2 | Medium | ||
| Owlbot | Owlbot API Key | kingfisher.owlbot.1 | Medium | Yes | |
| Packagecloud | PackageCloud API Key | kingfisher.packagecloud.1 | Medium | Yes | |
| Pagerdutyapikey | PagerDuty API Key | kingfisher.pagerduty.1 | Medium | Yes | |
| Particle.Io | particle.io Access Token | kingfisher.particleio.1 | Medium | Yes | Yes |
| Particle.Io | particle.io Access Token | kingfisher.particleio.2 | Medium | Yes | Yes |
| Pastebin | Pastebin API Key | kingfisher.pastebin.1 | Medium | Yes | |
| Paypal | PayPal OAuth Client ID | kingfisher.paypal.1 | Unknown | ||
| Paypal | PayPal OAuth Secret | kingfisher.paypal.2 | Unknown | Yes | |
| Paystack | Paystack API Key | kingfisher.paystack.1 | Medium | Yes | |
| Pdflayer | PdfLayer API Key | kingfisher.pdflayer.1 | Medium | Yes | |
| Pem | PEM-Encoded Private Key | kingfisher.pem.1 | High | ||
| Pem | Base64-PEM-Encoded Private Key | kingfisher.pem.2 | High | ||
| Pendo | Pendo Integration Key | kingfisher.pendo.1 | Medium | Yes | |
| Pepipost | Pepipost API Key | kingfisher.pepipost.1 | Medium | Yes | |
| Perplexity | Perplexity AI API Key | kingfisher.perplexity.1 | Medium | Yes | |
| Phpmailer | PHPMailer Credentials | kingfisher.phpmailer.1 | Medium | ||
| Pinecone | Pinecone API Key | kingfisher.pinecone.1 | Medium | Yes | |
| Pingdom | Pingdom API Token | kingfisher.pingdom.1 | Medium | Yes | |
| Pingidentity | PingOne Client ID | kingfisher.pingidentity.1 | Medium | ||
| Pingidentity | PingOne Client Secret | kingfisher.pingidentity.2 | Medium | ||
| Pipedrive | Pipedrive API Token | kingfisher.pipedrive.1 | High | Yes | |
| Plaid | Plaid Client ID (helper) | kingfisher.plaid.1 | Medium | ||
| Plaid | Plaid Secret (Production) | kingfisher.plaid.2 | Medium | Yes | |
| Plaid | Plaid Secret (Sandbox) | kingfisher.plaid.3 | Medium | Yes | |
| Plaid | Plaid Access Token (Production) | kingfisher.plaid.4 | Medium | Yes | |
| Plaid | Plaid Access Token (Sandbox) | kingfisher.plaid.5 | Medium | Yes | |
| Planetscale | PlanetScale API Token | kingfisher.planetscale.1 | Unknown | Yes | |
| Planetscale | PlanetScale Username | kingfisher.planetscale.2 | Unknown | ||
| Plivo | Plivo Auth ID | kingfisher.plivo.1 | Low | ||
| Plivo | Plivo Auth Token | kingfisher.plivo.2 | Medium | Yes | |
| Polymarket | Polymarket Builder Secret | kingfisher.polymarket.1 | Medium | ||
| Polymarket | Polymarket Builder Passphrase | kingfisher.polymarket.2 | Medium | ||
| Polymarket | Polymarket Builder API Key | kingfisher.polymarket.3 | Medium | ||
| Positionstack | Positionstack API Key | kingfisher.positionstack.1 | Medium | Yes | |
| Postgres | Postgres URL with hardcoded password | kingfisher.postgres.1 | Medium | Yes | |
| Posthog | PostHog Personal API Key | kingfisher.posthog.2 | Medium | Yes | |
| Posthog | PostHog Feature Flags Secure API Key | kingfisher.posthog.3 | Medium | ||
| Posthog | PostHog OAuth Access Token | kingfisher.posthog.4 | Medium | ||
| Posthog | PostHog OAuth Refresh Token | kingfisher.posthog.5 | Medium | ||
| Postman | Postman API Key | kingfisher.postman.1 | Medium | Yes | |
| Postmark | Postmark API Token | kingfisher.postmark.1 | Medium | Yes | |
| Prefect | Prefect API Token | kingfisher.prefect.1 | Medium | Yes | |
| Privateai | Private AI API Key | kingfisher.privateai.1 | Medium | Yes | |
| Privkey | Contains encrypted RSA private key | kingfisher.privkey.1 | High | ||
| Privkey | Contains Private Key | kingfisher.privkey.2 | High | ||
| Psexec | Credentials in PsExec | kingfisher.psexec.1 | Medium | ||
| Pubnub | PubNub Publish Key | kingfisher.pubnub.1 | Unknown | Yes | |
| Pubnub | PubNub Subscription Key | kingfisher.pubnub.2 | Medium | Yes | |
| Pulumi | Pulumi API Key | kingfisher.pulumi.1 | Unknown | Yes | |
| Pushbullet | Pushbullet Access Token | kingfisher.pushbullet.1 | Medium | Yes | |
| Pusher | Pusher Channels App Key | kingfisher.pusher.1 | Low | ||
| Pusher | Pusher Channels App Secret | kingfisher.pusher.2 | Medium | ||
| Pypi | PyPI Upload Token | kingfisher.pypi.1 | Medium | Yes | |
| Rabbitmq | RabbitMQ Credential | kingfisher.rabbitmq.1 | Medium | ||
| Rails | Rails Master Key | kingfisher.rails.1 | High | ||
| Rails | Rails Secret Key Base | kingfisher.rails.2 | High | ||
| Railway | Railway API Token | kingfisher.railway.1 | Medium | Yes | |
| Rapidapi | RapidAPI Key | kingfisher.rapidapi.1 | Medium | Yes | |
| Razorpay | Razorpay API Key | kingfisher.razorpay.1 | Medium | Yes | |
| Razorpay | Razorpay Test API Key | kingfisher.razorpay.2 | Medium | Yes | |
| Razorpay | Razorpay API Secret | kingfisher.razorpay.3 | Medium | ||
| React | React App Username | kingfisher.reactapp.1 | Medium | ||
| React | React App Password | kingfisher.reactapp.2 | Medium | ||
| Readme | ReadMe API Key | kingfisher.readme.1 | Medium | Yes | |
| Recaptcha | reCAPTCHA API Key | kingfisher.recaptcha.1 | Medium | Yes | |
| Redis | Redis URI Connection String | kingfisher.redis.1 | Medium | ||
| Redis | Python Redis Client Debug Output | kingfisher.redis.2 | Medium | ||
| Redis | Redis Password (Standalone Config) | kingfisher.redis.3 | Low | ||
| Redshift | Amazon Redshift Connection URI | kingfisher.redshift.1 | Medium | ||
| Render | Render API Key | kingfisher.render.1 | Medium | Yes | |
| Replicate | Replicate API Token | kingfisher.replicate.1 | Medium | Yes | |
| Resend | Resend API Key | kingfisher.resend.api_key.1 | High | Yes | |
| Retellai | Retell AI API Key | kingfisher.retellai.1 | Medium | Yes | |
| Ringcentral | RingCentral Client ID | kingfisher.ringcentral.1 | Medium | ||
| Ringcentral | RingCentral Client Secret | kingfisher.ringcentral.2 | Medium | ||
| Riot | Riot Platform Host | kingfisher.riot.1 | Medium | ||
| Riot | Riot Games API Key | kingfisher.riot.2 | Medium | Yes | |
| Rollbar | Rollbar Access Token | kingfisher.rollbar.1 | Medium | Yes | |
| Rubygems | RubyGems API Key | kingfisher.rubygems.1 | Medium | Yes | |
| Runway | Runway API Key | kingfisher.runway.1 | Medium | Yes | |
| Salesforce | Salesforce Access Token | kingfisher.salesforce.1 | Medium | Yes | |
| Salesforce | Salesforce Instance URL | kingfisher.salesforce.2 | Medium | ||
| Salesforce | Salesforce Consumer Key | kingfisher.salesforce.3 | Medium | ||
| Salesforce | Salesforce Consumer Secret | kingfisher.salesforce.4 | Medium | ||
| Salesforce | Salesforce Consumer Key and Secret | kingfisher.salesforce.5 | Medium | ||
| Salesforce | Salesforce Refresh Token | kingfisher.salesforce.6 | Medium | ||
| Salesforce | Salesforce Connected App Consumer Key (Prefixed) | kingfisher.salesforce.7 | Medium | Yes | |
| Salesloft | Salesloft API Key | kingfisher.salesloft.1 | Medium | Yes | |
| Samsara | Samsara API Token (prefixed) | kingfisher.samsara.1 | High | Yes | |
| Samsara | Samsara API Token (contextual) | kingfisher.samsara.2 | Low | Yes | |
| Sanity | Sanity API Token | kingfisher.sanity.1 | Medium | Yes | |
| Sauce | Sauce Labs Username | kingfisher.saucelabs.1 | Medium | ||
| Sauce | Sauce Labs API Endpoint | kingfisher.saucelabs.2 | Medium | ||
| Sauce | Sauce Labs Access Key | kingfisher.saucelabs.3 | Medium | Yes | |
| Scale | Scale API Key | kingfisher.scale.1 | Medium | Yes | |
| Scale | Scale Callback Auth Key | kingfisher.scale.2 | Medium | ||
| Scaleway | Scaleway Secret Key | kingfisher.scaleway.1 | Medium | Yes | |
| Scalingo | Scalingo API Token | kingfisher.scalingo.1 | Medium | Yes | |
| Scalr | Scalr API Access Token | kingfisher.scalr.1 | High | Yes | |
| Scraperapi | ScraperAPI Key | kingfisher.scraperapi.1 | Medium | Yes | |
| Segment | Segment Public API Token | kingfisher.segment.1 | Medium | Yes | |
| Segment | Segment API Key | kingfisher.segment.2 | Medium | Yes | |
| Sendbird | Sendbird Application ID | kingfisher.sendbird.1 | Medium | ||
| Sendbird | Sendbird API Token | kingfisher.sendbird.2 | Medium | Yes | |
| Sendgrid | Sendgrid API token | kingfisher.sendgrid.1 | Medium | Yes | Yes |
| Sendinblue | Sendinblue API Token | kingfisher.sendinblue.1 | Medium | Yes | |
| Sentry | Sentry Access Token | kingfisher.sentry.1 | Medium | Yes | |
| Sentry | Sentry Organization Token | kingfisher.sentry.2 | Medium | Yes | |
| Sentry | Sentry User Token | kingfisher.sentry.3 | Medium | Yes | |
| Serpapi | SerpApi API Key | kingfisher.serpapi.1 | Medium | Yes | |
| Settlemint | SettleMint Personal Access Token | kingfisher.settlemint.1 | Medium | ||
| Settlemint | SettleMint Application Access Token | kingfisher.settlemint.2 | Medium | ||
| Settlemint | SettleMint Service Access Token | kingfisher.settlemint.3 | Medium | ||
| Shippo | Shippo API Token | kingfisher.shippo.1 | Medium | Yes | |
| Shodan | SHODAN API Key | kingfisher.shodan.1 | Medium | Yes | |
| Shopify | Shopify access token | kingfisher.shopify.1 | Unknown | Yes | |
| Shopify | Shopify Domain | kingfisher.shopify.2 | Unknown | ||
| Shortcut | Shortcut API Token | kingfisher.shortcut.1 | Medium | Yes | |
| Shutterstock | Shutterstock OAuth Token | kingfisher.shutterstock.1 | Medium | Yes | |
| Sidekiq | Sidekiq Enterprise Credential | kingfisher.sidekiq.1 | Medium | ||
| Sidekiq | Sidekiq Sensitive URL | kingfisher.sidekiq.2 | Medium | ||
| Signifyd | Signifyd API Key | kingfisher.signifyd.1 | Medium | Yes | |
| Slack | Slack App Token | kingfisher.slack.1 | Unknown | Yes | Yes |
| Slack | Slack Token | kingfisher.slack.2 | Unknown | Yes | Yes |
| Slack | Slack Webhook | kingfisher.slack.4 | Unknown | Yes | |
| Smb | SMB / CIFS Connection URI | kingfisher.smb.1 | Medium | ||
| Smtp | SMTP Credentials | kingfisher.smtp.1 | Medium | ||
| Snowflake | Snowflake Connection URI Credentials | kingfisher.snowflake.1 | Medium | ||
| Snyk | Snyk API Key | kingfisher.snyk.1 | Unknown | Yes | |
| Solr | Apache Solr Connection URI | kingfisher.solr.1 | Medium | ||
| Sonarcloud | SonarCloud API Token | kingfisher.sonarcloud.1 | Unknown | Yes | |
| Sonarqube | SonarQube API Key | kingfisher.sonarqube.1 | Unknown | Yes | |
| Sonarqube | SonarQube Host | kingfisher.sonarqube.2 | Unknown | ||
| Sonarqube | SonarQube Token | kingfisher.sonarqube.3 | Medium | ||
| Sourcegraph | Sourcegraph Access Token | kingfisher.sourcegraph.1 | Unknown | Yes | |
| Sourcegraph | Sourcegraph _Legacy_ API Key | kingfisher.sourcegraph.2 | Medium | Yes | |
| Sourcegraph | Sourcegraph Cody Gateway Key | kingfisher.sourcegraph.3 | Medium | Yes | |
| Sparkpost | SparkPost API Key | kingfisher.sparkpost.1 | Medium | Yes | |
| Splunk | Splunk Authentication Token | kingfisher.splunk.1 | Medium | ||
| Spotify | Spotify Access Token | kingfisher.spotify.1 | Medium | Yes | |
| Sqreen | Sqreen Token | kingfisher.sqreen.1 | High | ||
| Square | Square Access Token | kingfisher.square.1 | Medium | Yes | |
| Square | Square Access Token | kingfisher.square.2 | Medium | Yes | |
| Square | Square OAuth Secret | kingfisher.square.3 | Medium | Yes | |
| Squarespace | Squarespace API Key | kingfisher.squarespace.1 | Medium | Yes | |
| Sshpass | SSH / SCP Password (sshpass) | kingfisher.sshpass.1 | Medium | ||
| Sslmate | SslMate API Key | kingfisher.sslmate.1 | Medium | Yes | |
| Stabilityai | Stability AI API Key | kingfisher.stabilityai.1 | Medium | Yes | |
| Stackhawk | StackHawk API Key | kingfisher.stackhawk.1 | Medium | Yes | |
| Statsig | Statsig Server Secret Key | kingfisher.statsig.1 | High | Yes | |
| Statuscake | StatusCake API Token | kingfisher.statuscake.1 | Medium | Yes | |
| Statuspage | Statuspage API Key | kingfisher.statuspage.1 | Medium | Yes | |
| Storyblok | Storyblok API Token | kingfisher.storyblok.1 | Medium | Yes | |
| Strava | Strava Access Token | kingfisher.strava.1 | Medium | Yes | |
| Stream | Stream.io API Key | kingfisher.stream.1 | Low | ||
| Stream | Stream.io API Secret | kingfisher.stream.2 | Medium | ||
| Stripe | Stripe Publishable Key | kingfisher.stripe.1 | Medium | ||
| Stripe | Stripe Secret / Restricted Key | kingfisher.stripe.2 | Medium | Yes | |
| Stytch | Stytch Project ID | kingfisher.stytch.1 | Medium | ||
| Stytch | Stytch Project Secret | kingfisher.stytch.2 | Medium | Yes | |
| Sumologic | Sumo Logic Access ID | kingfisher.sumologic.1 | Medium | ||
| Sumologic | Sumo Logic Access Key | kingfisher.sumologic.2 | Medium | Yes | Yes |
| Supabase | Supabase Management Token | kingfisher.supabase.1 | Medium | Yes | |
| Supabase | Supabase Project API Key | kingfisher.supabase.2 | Medium | Yes | |
| Supabase | Supabase Project URL | kingfisher.supabase.3 | Medium | ||
| Surge | Surge.sh Deploy Token | kingfisher.surge.1 | High | ||
| Tableau | Tableau Personal Access Token | kingfisher.tableau.1 | Medium | ||
| Tailscale | Tailscale API Key | kingfisher.tailscale.1 | Medium | Yes | Yes |
| Tavily | Tavily API Key | kingfisher.tavily.1 | Medium | Yes | |
| Tavus | Tavus API Key | kingfisher.tavus.1 | Medium | Yes | |
| Teamcity | TeamCity API Token | kingfisher.teamcity.1 | Unknown | ||
| Telegram | Telegram Bot Token | kingfisher.telegram.1 | Medium | Yes | |
| Temporal | Temporal Cloud API Key | kingfisher.temporal.1 | Medium | Yes | |
| Tencent | Tencent Cloud Secret ID | kingfisher.tencent.1 | Low | ||
| Tencent | Tencent Cloud Secret Key | kingfisher.tencent.2 | Medium | ||
| Terraform | Terraform Cloud / HCP Terraform API Token | kingfisher.terraform.1 | High | Yes | |
| Testkube | Testkube API Key | kingfisher.testkube.1 | Medium | Yes | |
| Testkube | Testkube Organization ID | kingfisher.testkube.2 | Medium | ||
| Testkube | Testkube Environment ID | kingfisher.testkube.3 | Medium | ||
| Thingsboard | ThingsBoard Access Token | kingfisher.thingsboard.1 | Medium | ||
| Thingsboard | ThingsBoard Provision Device Key | kingfisher.thingsboard.2 | Medium | ||
| Thingsboard | ThingsBoard Provision Device Secret | kingfisher.thingsboard.3 | Medium | ||
| Thycotic | Thycotic / Delinea Secret Server Credentials | kingfisher.thycotic.1 | Medium | ||
| Todoist | Todoist API Token | kingfisher.todoist.1 | Medium | Yes | |
| Togetherai | Together.ai API Key | kingfisher.together.1 | Medium | Yes | |
| Travisci | Travis CI Token | kingfisher.travisci.1 | Medium | Yes | |
| Travisci | Travis CI Encrypted Variable | kingfisher.travisci.2 | Medium | ||
| Trello | Trello API Token | kingfisher.trello.1 | Medium | ||
| Trendmicro | Trend Micro Deep Security API Key | kingfisher.trendmicro.1 | High | Yes | |
| Trendmicro | Trend Micro Cloud One API Key | kingfisher.trendmicro.2 | High | Yes | |
| Truenas | TrueNAS API Key (WebSocket) | kingfisher.truenas.1 | Medium | Yes | |
| Truenas | TrueNAS API Key (REST API) | kingfisher.truenas.2 | Medium | Yes | |
| Truenas | TrueNAS Instance URL | kingfisher.truenas.3 | Medium | ||
| Truenas | TrueNAS API Key (keyword proximity) | kingfisher.truenas.4 | Medium | Yes | |
| Twilio | Twilio API ID | kingfisher.twilio.1 | Unknown | ||
| Twilio | Twilio API Key | kingfisher.twilio.2 | Unknown | Yes | Yes |
| Twitch | Twitch API Token | kingfisher.twitch.1 | Medium | Yes | Yes |
| X / Twitter Bearer Token (App-only) | kingfisher.twitter.1 | Medium | Yes | ||
| Twitter Consumer Key | kingfisher.twitter.2 | Unknown | |||
| X / Twitter Consumer Secret | kingfisher.twitter.3 | Unknown | Yes | ||
| Typeform | Typeform API Token | kingfisher.typeform.1 | Medium | Yes | |
| Uber | Uber Server Token | kingfisher.uber.1 | High | ||
| Ubidots | Ubidots API Key | kingfisher.ubidots.1 | High | ||
| Unkey | Unkey Root Key | kingfisher.unkey.1 | Medium | Yes | |
| Unkey | Unkey API Key (key_ prefix) | kingfisher.unkey.2 | Medium | Yes | |
| Unkey | Unkey API Key Secret (creation-only plaintext) | kingfisher.unkey.3 | Medium | ||
| Unsplash | Unsplash Access Key | kingfisher.unsplash.1 | Medium | Yes | |
| Uptimerobot | UptimeRobot API Key | kingfisher.uptimerobot.1 | Medium | Yes | |
| Uri | URI with Username and Secret | kingfisher.uri.1 | Medium | Yes | |
| Urlscan | urlscan.io API Key | kingfisher.urlscan.1 | Medium | Yes | |
| Vapi | Vapi API Key | kingfisher.vapi.1 | Medium | Yes | |
| Vastai | Vast.ai API Key | kingfisher.vastai.1 | Medium | Yes | |
| Vercel | Vercel API Token (legacy 24-char) | kingfisher.vercel.1 | Medium | Yes | Yes |
| Vercel | Vercel Personal Access Token (vcp_) | kingfisher.vercel.2 | Medium | Yes | Yes |
| Vercel | Vercel Integration Token (vci_) | kingfisher.vercel.3 | Medium | Yes | Yes |
| Vercel | Vercel App Access Token (vca_) | kingfisher.vercel.4 | Medium | Yes | Yes |
| Vercel | Vercel App Refresh Token (vcr_) | kingfisher.vercel.5 | Medium | Yes | Yes |
| Vercel | Vercel AI Gateway API Key (vck_) | kingfisher.vercel.6 | Medium | Yes | |
| Virustotal | VirusTotal API Key | kingfisher.virustotal.1 | Medium | Yes | |
| Vkontakte | VKontakte Access Token | kingfisher.vkontakte.1 | High | Yes | |
| Vmware | Credentials in Connect-VIServer Invocation | kingfisher.vmware.1 | Unknown | ||
| Vonage | Vonage (Nexmo) API Key | kingfisher.vonage.1 | Low | ||
| Vonage | Vonage (Nexmo) API Secret | kingfisher.vonage.2 | Medium | Yes | |
| Voyageai | Voyage AI API Key | kingfisher.voyageai.api_key | High | Yes | |
| Vultr | Vultr API Key | kingfisher.vultr.1 | Medium | Yes | Yes |
| Wakatime | WakaTime API Key | kingfisher.wakatime.1 | Medium | Yes | |
| Wakatime | WakaTime Prefixed API Key | kingfisher.wakatime.2 | Medium | Yes | |
| Weatherapi | WeatherAPI.com API Key | kingfisher.weatherapi.1 | Medium | Yes | |
| Webex | Webex Integration Client ID | kingfisher.webex.1 | Low | ||
| Webex | Webex Integration Client Secret | kingfisher.webex.2 | Medium | ||
| Webflow | Webflow API Token | kingfisher.webflow.1 | Medium | Yes | |
| WeChat App ID | kingfisher.wechat.1 | Low | |||
| WeChat App Secret | kingfisher.wechat.2 | Medium | |||
| Weightsandbiases | Weights and Biases API Key | kingfisher.wandb.1 | Medium | Yes | |
| Weightsandbiases | Weights and Biases API Key (v1) | kingfisher.wandb.2 | Medium | Yes | |
| Wepay | WePay Access Token | kingfisher.wepay.1 | High | Yes | |
| Wireguard | WireGuard Private Key | kingfisher.wireguard.1 | Medium | ||
| Wireguard | WireGuard Preshared Key | kingfisher.wireguard.2 | Medium | ||
| Wiz | Wiz Client ID | kingfisher.wiz.1 | Medium | ||
| Wiz | Wiz Client Secret | kingfisher.wiz.2 | Medium | Yes | |
| Workato | Workato API Token | kingfisher.workato.1 | Medium | Yes | |
| Wpengine | WPEngine API Key | kingfisher.wpengine.1 | Medium | Yes | |
| Wpengine | WPEngine Account Name | kingfisher.wpengine.2 | Medium | ||
| Xai | xAI (Grok) API Key | kingfisher.xai.1 | Medium | Yes | |
| Yahoo | Yahoo OAuth2 Client ID | kingfisher.yahoo.1 | High | ||
| Yahoo | Yahoo OAuth2 Client Secret | kingfisher.yahoo.2 | Medium | ||
| Yandex | Yandex API Key | kingfisher.yandex.1 | Medium | Yes | |
| Yelp | Yelp API Key | kingfisher.yelp.1 | Medium | Yes | |
| Yousign | YouSign API Key | kingfisher.yousign.1 | High | Yes | |
| Youtube | YouTube API Key | kingfisher.youtube.1 | Medium | Yes | |
| Zapier | Zapier Webhook URL | kingfisher.zapier.1 | Medium | ||
| Zendesk | Zendesk Subdomain | kingfisher.zendesk.1 | Medium | ||
| Zendesk | Zendesk Account Email | kingfisher.zendesk.2 | Medium | ||
| Zendesk | Zendesk API Token | kingfisher.zendesk.3 | Medium | Yes | |
| Zerobounce | ZeroBounce API Key | kingfisher.zerobounce.1 | Medium | Yes | |
| Zhipu | Zhipu (BigModel) API Key | kingfisher.zhipu.1 | Medium | Yes | |
| Zohocrm | Zoho CRM API Access Token | kingfisher.zohocrm.1 | Medium | Yes | |
| Zoom | Zoom OAuth Client ID | kingfisher.zoom.1 | Low | ||
| Zoom | Zoom OAuth Client Secret | kingfisher.zoom.2 | Medium | ||
| Zuplo | Zuplo API Key | kingfisher.zuplo.1 | Medium | Yes |