Free AI agent scan

Paste an agent's config, its .env file or your MCP server list. The scan finds API keys sitting in plain text, one key shared by several agents, and agents that call the model provider directly with nothing in between. It runs in your browser: what you paste is never sent anywhere, and there is nothing to sign up for.

Scan Try a sample

What it looks for

• Model and service keys in plain text: OpenAI, Anthropic, Google, Groq, xAI, OpenRouter, Hugging Face, AWS, GitHub, Stripe, Slack, Supabase service-role keys, and any long value assigned to a name with KEY, SECRET, TOKEN or PASSWORD in it.
• The same key used by several agents or MCP servers.
• Agents that call a model provider directly, with no limit on calls, models or loops in between.

Fix what it finds

Odile Gate keeps the real key and gives each agent its own key, a list of the calls and models it may use, a per-minute limit, a loop stop and an audit log. Prompts and answers are never stored. Free for 3 agents and 10,000 calls a month. Start free or put Gate in front of your model key.