Credential Scanner

Scans the workflow JSON for a token, API key, or connection string pasted directly into a node parameter — header, query param, or body field — instead of referenced through a credential registered in n8n.

↓ drop here

Drag the workflow JSON

or click to choose a file — nothing leaves your browser

or paste the JSON directly

runs entirely in your browser — the JSON is never sent to any server. it only reads the node parameters; nothing gets rewritten automatically.