Files · ZIPs · MCP configs · agent traces

Sanitize agent artifacts before the handoff.

Use the free pasted-text check below, or get the full Agent Artifact Sanitizer to inspect selected files and ZIPs, trace repeated credential values, and export a redacted handoff bundle locally.

Offline by design: no uploads, analytics, storage, or network requests

Text to inspect

Maximum 500 KB. The scan runs only after you click the button. Avoid pasting a live credential anywhere if you can rotate or remove it first.

Local result

Sharing boundary

Run a scan to separate credential findings from permission-boundary warnings.
Ready-to-deliver v1.0

One local file. A complete sanitized handoff.

The full Agent Artifact Sanitizer accepts selected text artifacts and ZIP archives, detects credential propagation across files, and generates a new store-only ZIP containing sanitized copies, a findings report, and a credential-rotation checklist.

  • Up to 200 text files, 2 MB each and 10 MB total
  • Common credentials plus broad agent-permission warnings
  • Repeated-value detection across files
  • Unsafe paths, encrypted entries, binaries, and unsupported compression skipped
  • No installation, uploads, analytics, storage, or network requests
Request the full sanitizer

Public intake only. Do not attach files or include credentials, private data, or email addresses. Delivery follows confirmed availability and cleared payment.

What this checks

A sharing check, not a vault.

Credential shapesCommon provider keys, bearer tokens, JWTs, private-key headers, tokenized URLs, and sensitive assignments.
Agent blast radiusFull permission modes, all-tool exposure, and named destructive tool access that deserve an explicit decision.
Safe handoffA redacted copy for an issue, chat, support ticket, or setup guide without echoing detected values into the report.

Pattern matching can miss custom credential formats and can flag synthetic values. A clean result does not prove that text is safe, and this tool does not test whether a credential is valid. If a live secret has already been shared, revoke or rotate it at the issuing service.