Honeytokens
Bulk prefix lookup for honeytoken HMSL hashes
Accepts a list of 5-character HMSL hash prefixes and returns hints for matching honeytokens owned by the caller's account.
The response contains only SHA-256 hints of full HMSL hashes, not raw honeytoken values or metadata. Callers reconcile matches locally by computing hints from their own full hashes.
Requires the honeytokens:check scope, or honeytokens:read for backward compatibility. Tokens with honeytokens:write also work because that scope implicitly grants honeytokens:read.
post/v1/honeytokens/prefixes
Request body
Example request
{
"prefixes": [
"abcde",
"12345"
]
}Response
Matching honeytoken hints
Example response
{
"matches": [
{
"hint": "6b8c7a2bca64845cd21f18f4756536e398a7765f003612db15b5b525bf564ebf"
},
{
"hint": "9a3f8c1e2b4d5a6f7c8e9b0a1d2c3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d"
}
]
}