What is Tessary's secret_leak classifier?

secret_leak is one of Tessary’s built-in classifiers: a deterministic check that reads everything an agent emits, including inner calls whose output reaches logs and downstream prompts, and flags credentials sitting where they shouldn’t.

It looks for the shape of a live credential: provider API keys, private-key block headers, session tokens, and password-like assignments such as api_key= or password:. Ordinary prose about passwords doesn’t trigger it; the check is anchored on what a credential looks like, not on the word “password” showing up nearby.

Like Tessary’s other built-in classifiers, it’s a narrow, cheap check on one property, not a judgment on the whole trace. A detection writes a finding, and triage decides whether it’s a real leak before it becomes a case anyone has to look at.

keep reading

More on this.

Can I see the actual secret Tessary flagged?No. Detections carry redacted evidence, a pattern name and a short snippet, never the credential itself.answer →Does mentioning a password in conversation trigger secret_leak?No. It's anchored on the shape of a live credential, like a key prefix or private-key header, not the word 'password' in ordinary prose.answer →Does secret_leak see credentials in inner tool calls, or only the final response?Everything. It checks every span in a trace, including inner tool calls, not just the message the user ends up reading.answer →Everything on tessary secret leakThe definition, and every question answered under tessary secret leak.concept →

Send us the traces you already emit.

book a demo