keyhog-core 0.5.4

# Docs: https://docs.mx.com/api-reference/platform-api/overview/
# Format: Client ID starts with CLIENT- followed by alphanumeric, API key is 32 hex characters
# Verify: GET /users with Basic Auth header returns 200 if valid
# Prefix: CLIENT-

[detector]
id = "mx-api-credentials"
name = "MX API Credentials"
service = "mx"
severity = "critical"
keywords = ["MX_CLIENT_ID", "MX_API_KEY", "client_id", "api_key"]

[[detector.patterns]]
regex = "(?:MX|mx)[._-]?(?:CLIENT|client)?[._-]?(?:ID|id)[=:\\s\"'']+(CLIENT-[a-fA-F0-9]{8,24})"
description = "MX Client ID (CLIENT- prefix with alphanumeric)"
group = 1

[[detector.patterns]]
regex = "(?:MX|mx)[._-]?(?:API|api)?[._-]?(?:KEY|key)[=:\\s\"'']+([a-f0-9]{32})"
description = "MX API Key (32-character hex string)"
group = 1