Show HN: I Made a Tool to Detect Leaked API Keys on GitHub in Real Time

3 zaim_abbasi 2 7/23/2025, 6:30:53 PM apiradar.live ↗

I built API Radar, a tool that scans public GitHub commits in real time to detect exposed API keys (OpenAI, Google, Claude, etc).

It’s fast, scalable, and tracks real leaks with contextual metadata and filtering. So far: 9,600+ repos scanned, 280+ leaks detected, all ethically surfaced from public code.

Comments (2)

Norcim133 · 5h ago

Nice little site. What did you build it with?

I once leaked an API key and instantly got a mail from GitGuardian informing me of the leak. It was a) super helpful as I wouldn't have known otherwise b) it seemed like a clever way to spread their name/biz

(in case that's helpful to your model)

zaim_abbasi · 4h ago

thanks! built it solo - nextjs + fastify + mongodb mostly. scanner runs separate n just keeps scanning public github commits in real-time.

yea gitguardian's alerts are super useful, got one myself once too

api radar’s kinda diff tho - more like public dashboard vibes. anyone can just browse and see what kind of keys are leaking n where. useful if ur into redteaming, trends, or just curious lol

Vibe coding turned this Swedish AI unicorn into the fastest growing startup ever (forbes.com)

I Eat (taylor.town)

Show HN: Voice-First AI Code Review Platform (Looking for OSS Beta testers) (lightlayer.dev)

Ask HN: Has anyone deployed LLMs to production?

Surprising Science: How Electric Cars Transform Urban Air (modernengineeringmarvels.com)

What is X-Forwarded-For and when can you trust it? (httptoolkit.com)

Spaghetti All'assassina (en.wikipedia.org)

Show HN: Marchat – Terminal-based chat app written in Go (github.com)

Donald Trump Is Fairy-Godmothering AI (theatlantic.com)

Could you swap your mouse and keyboard for a smart bracelet? (scimex.org)

Anyone building P2P alternatives to capitalism? (github.com)

Ending 'woke AI' isn't enough: fight the 'monster' within it (nypost.com)

Show HN: Synthetic Users that test your app, catch bugs, and provide feedback (synthetic.usejina.com)

What's That Splatter on Your Windshield? (nytimes.com)

When photography was born, fascination, obsession, and danger followed (washingtonpost.com)

Cluely Paying $1M Salaries (twitter.com)

The Largest Ever Solar Storm Detected In 14,300-year-old Tree Rings (2023) (astrobiology.com)

Contextual.ai (contextual.ai)

Guide to PDF security (unicornforms.com)

A Small Web July (smallcypress.bearblog.dev)

Low cost mmWave 60GHz radar sensor for advanced sensing (infineon.com)

Why Are We Pretending AI Is Going to Take All the Jobs? (thebignewsletter.com)

BYD Bets on Budget EV Boom with Atto 1 Debut in Indonesia (jakartaglobe.id)

Ask HN: Does an RSS-based Read-It-Later service exist?

At Victoria Park Model Boat Club (spitalfieldslife.com)

Don't Use External CSS (maurycyz.com)

Ask HN: WASM Profiling Icache vs. Dcache

A 1995 IC Program Helped Invent Google's Surveillance-Scale Search Engine (keystoneweb.dev)

Discovering and recovering from PostgreSQL corruption on Matrix.org (matrix.org)

Superchargers are the only part of Tesla's business seeing growth (electrek.co)

ELPiS: Small-Web Zine (elpis.ws)

Is This the End of Google as We Know It? (gizmodo.com)

Ask HN: Why do so many people think AI will continue to improve exponentially?

Tesla Q2 2025 Update [pdf] (tesla.com)

A generic non-invasive neuromotor interface for human-computer interaction (nature.com)

Show HN: Your Startup Needs a Better Name (domaingen.app)

16colo.rs: ANSI/ASCII art archive (16colo.rs)

BGP Tools (bgp.tools)

We Built an Auto-Aiming Trash Can [video] (youtube.com)

National Blue Alert Network (cops.usdoj.gov)

Sorption enhanced chemical looping gasification of biomass for H2 production (sciencedirect.com)

You Shouldn't Have to Make Your Social Media Public to Get a Visa (eff.org)

Show HN: ETHShot – an Ethereum test‑net "take‑your‑shot" jackpot game

First ever fault rupture caught on video, Mianmar 7.9 (youtube.com)

Built this after my mom asked how to 'just make herself smile in a photo (apps.apple.com)

I built a complete guide site for the game "99 Nights in the Forest" (99nightsintheforest.online)

We transcribed a week of audio in a minute for a dollar (modal.com)

Test Ad Block (adblock.turtlecute.org)

What Makes a Mature Science (asimov.press)

Dynamic Chunking for End-to-End Hierarchical Sequence Modeling (arxiv.org)

Show HN: I Made a Tool to Detect Leaked API Keys on GitHub in Real Time

Comments (2)