API Shield

What it does

You paste an API key into your code "just for testing" then git push. Within minutes, automated bots have already harvested it. API Shield eliminates this risk entirely. It scans your code in real-time, directly inside VS Code, no cloud, no APIs, no telemetry. Every keystroke is checked locally on your machine. Real-time API key & secret leak detector for VS Code Catch leaked credentials before they reach Git 100% local, zero cloud dependencies.

Extension for Visual Studio Code - API Key & Secret Leak Prevention | Real-Time | No AI | 100% Local

Real-time API key & secret leak detector for VS Code Catch leaked credentials before they reach Git — 100% local, zero cloud dependencies. You paste an API key into your code "just for testing" — then git push . Within minutes, automated bots have already harvested it. API Shield eliminates this risk entirely. It scans your code in real-time, directly inside VS Code — no cloud, no APIs, no telemetry. Every keystroke is checked locally on your machine. 🔴 Instant Inline Detection — Red squiggly underlines the moment you type an API key. No CI/CD wait. 🧠 4-Layer Scan Engine — Pre-filter → 30+ regex patterns → Shannon entropy analysis → false positive elimination. 📋…from marketplace.visualstudio.com

• 
  API RadarJan 2026 · apiradar.live · ▲77

  We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…

• 
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• 
  GitGuardian Shield2020 · github.com · ▲80

  Open sourced application to detect security vulnerabilities.

• 
  GitGuardian2018 · gitguardian.com · ▲132

  Detect secrets in source code, public and private!

• 
  HasMySecretLeaked2023 · gitguardian.com · ▲160

  Check if your secrets and API keys have leaked on GitHub.

• 
  EnvKey2017 · ▲79

  Protect api keys and credentials. Keep config in sync.

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 29d ago · corespeed.io

• 
  Lightfield▲901

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲728

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲716

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲709

  Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲702

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲659

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com