keyhog-core 0.5.4

# Docs: https://api-docs.mouseflow.com/
# Format: Email + API key pair for HTTP Basic Auth
# Verify: GET /websites with Basic auth
# Prefix: none (requires context anchoring)

[detector]
id = "mouseflow-api-credentials"
name = "Mouseflow API Credentials"
service = "mouseflow"
severity = "medium"
keywords = ["MOUSEFLOW_API_KEY", "mouseflow_api_key", "mouseflow.com", "api-us.mouseflow"]

[[detector.patterns]]
regex = "(?:MOUSEFLOW[_.-]?API[_.-]?KEY|mouseflow[_.-]?api[_.-]?key)[=:\\s\"'']+([a-zA-Z0-9_-]{10,})"
description = "Mouseflow API key with context anchor"
group = 1

[[detector.patterns]]
regex = "api-us\\.mouseflow\\.com[^\\n]{0,100}Authorization[^\\n]{0,50}Basic[^\\n]{0,50}([a-zA-Z0-9+/=]{20,})"
description = "Mouseflow API basic auth header"
group = 1