apikey-inspector 🔍
One package, zero fluff, maximum insight.
apikey-inspector is a universal, privacy-first API key inspector. It allows you to identify, validate, and inspect API keys from major AI providers without risking leakage.
✨ Features
- 🔒 Privacy-First: Pure regex detection before any network calls.
- 🎭 Auto-Masking: Sensitive keys are always masked in terminal output and redacted in JSON.
- 🚀 Async-First: Batch inspect hundreds of keys concurrently with per-provider rate-limiting.
- 📡 Deep Inspection: Fetches available models, usage, costs, and rate limits where available.
- 🛠️ CI/CD Ready: Exit codes optimized for security pipelines (
--scanflag).
📦 Supported Providers
| Provider | Key Detection | Validation | Usage/Costs | Models List |
|---|---|---|---|---|
| OpenAI | ✅ | ✅ | ✅ | ✅ |
| Anthropic | ✅ | ✅ | 🚧 | ✅ |
| Google Gemini | ✅ | ✅ | 🚧 | ✅ |
| HuggingFace | ✅ | ✅ | ✅ | ✅ |
| Cohere | ✅ | ✅ | 🚧 | ✅ |
🚀 Quick Start
Installation
pip install apikey-inspector
Usage
# Basic inspection (masks key automatically)
apikey inspect sk-proj-1234...
# Offline mode (detection only, no network calls)
apikey inspect sk-proj-1234... --offline
# Batch inspection from a file or stdin
cat keys.txt | apikey inspect --json > results.json
# Security scanning mode (exit 1 if valid keys are found)
apikey inspect sk-proj-1234... --scan
🛠️ CLI Reference
| Option | Description |
|---|---|
inspect [KEY] |
The main command to inspect a key. |
--offline |
Skip network checks, only perform local regex detection. |
--json |
Output raw JSON instead of the rich table. |
--no-redact |
Disable automatic redaction of secrets in JSON output. |
--from-env VAR |
Read the API key from an environment variable. |
--scan |
Return exit code 1 if any valid keys are detected (for CI). |
version |
Show the current version. |
🧪 Development & Testing
# Clone the repo
git clone https://github.com/AliHaSSan-13/apikey-inspector.git
cd apikey-inspector
# Install in editable mode with dev dependencies
pip install -e ".[dev]"
# Run tests
pytest tests/
📜 License
MIT © Ali Hassan
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
apikey_inspector-0.1.0.4.tar.gz
(10.3 kB
view details)
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file apikey_inspector-0.1.0.4.tar.gz.
File metadata
- Download URL: apikey_inspector-0.1.0.4.tar.gz
- Upload date:
- Size: 10.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
9cdcc98d48eb555cbf29f26cb0215c73263c159222efff5750b31554c77e5bff
|
|
| MD5 |
6eeb945fb06ae0c233cf057cdc780ab5
|
|
| BLAKE2b-256 |
8198d268e6651f6a8fb610b9c9c02a5161e2f5cb8dcf67fe61b760de52976103
|
Provenance
The following attestation bundles were made for apikey_inspector-0.1.0.4.tar.gz:
Publisher:
pypi-publish.yml on AliHaSSan-13/apikey-inspector
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
apikey_inspector-0.1.0.4.tar.gz -
Subject digest:
9cdcc98d48eb555cbf29f26cb0215c73263c159222efff5750b31554c77e5bff - Sigstore transparency entry: 1239418586
- Sigstore integration time:
-
Permalink:
AliHaSSan-13/apikey-inspector@f2d31d6c73270fa88d667d3be5623ce2382215a8 -
Branch / Tag:
refs/tags/v0.1.0.4 - Owner: https://github.com/AliHaSSan-13
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
pypi-publish.yml@f2d31d6c73270fa88d667d3be5623ce2382215a8 -
Trigger Event:
release
-
Statement type:
File details
Details for the file apikey_inspector-0.1.0.4-py3-none-any.whl.
File metadata
- Download URL: apikey_inspector-0.1.0.4-py3-none-any.whl
- Upload date:
- Size: 16.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
264722d560e50eb5a639765c17237085cb914ddc8614c6664b93043066da7b00
|
|
| MD5 |
19e7c1db14d8ba1bb45b4d02d6df3e56
|
|
| BLAKE2b-256 |
e2f19a67d944185831e24fbc3dd52df58fd0487a15e0bd30798c255244f4ca01
|
Provenance
The following attestation bundles were made for apikey_inspector-0.1.0.4-py3-none-any.whl:
Publisher:
pypi-publish.yml on AliHaSSan-13/apikey-inspector
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
apikey_inspector-0.1.0.4-py3-none-any.whl -
Subject digest:
264722d560e50eb5a639765c17237085cb914ddc8614c6664b93043066da7b00 - Sigstore transparency entry: 1239418587
- Sigstore integration time:
-
Permalink:
AliHaSSan-13/apikey-inspector@f2d31d6c73270fa88d667d3be5623ce2382215a8 -
Branch / Tag:
refs/tags/v0.1.0.4 - Owner: https://github.com/AliHaSSan-13
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
pypi-publish.yml@f2d31d6c73270fa88d667d3be5623ce2382215a8 -
Trigger Event:
release
-
Statement type:
