mantra for Mac
Tool to hunt down API key leaks in JS files and pages
mantra — overview
「?」 About Mantra
The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages.
It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for authentication to online services such as third-party APIs and are confidential and should not be shared publicly.
By using this tool, developers can quickly identify if their API keys are leaking and take steps to fix the problem before they are compromised. Furthermore, the tool can be useful for security officers, who can use it to verify that applications and websites that use external APIs are adequately protecting their keys.
In summary, this tool is an efficient and accurate solution to help secure your API keys and prevent sensitive information leaks.
Help
Usage
Install
From go:
From source code:
Results
Firebase API Key Leak:
Buy me a coffee?
Details
用于追踪 JS 文件和页面中 API 密钥泄露的工具
How to install mantra
- Open Terminal (press ⌘ + Space and type “Terminal”).
- If Homebrew is not installed yet, run the command below first.
- Run this command:
Latest 10 releases
Last updated 2025-08-06; current version v3.1, with the latest 4 releases listed.
| Version | Released | Type | Size | macOS | Windows | Linux |
|---|---|---|---|---|---|---|
| v3.1 | 2025-08-06 | Stable | — | — | — | Download |
| v2.0 | 2024-04-01 | Stable | — | — | — | Download |
| v.1.1 | 2023-05-20 | Stable | 6.5 MB | Download | Download | Download |
| v1.0 | 2023-03-07 | Stable | — | — | Download | Download |
Data from GitHub Releases; stable releases first, each group sorted newest first.
Compared with similar apps
Only public metadata is compared, with no subjective recommendation; see the compare pages for field-by-field comparisons.
| App | Version | License | Architecture | 30-day installs |
|---|---|---|---|---|
| mantra | v3.1 | GPL-3.0-only | CLI | 1 |
| flickcurl | 1.26 | GPL-2.0-or-later OR LGPL-2.1-or-later | CLI | 0 |
| fsevents-tools | 1.0.0 | Apache-2.0 | CLI | 1 |
| glbinding | v3.5.0 | MIT | CLI | 1 |
Similar apps: Command-line Tools
flickcurl
flickcurl is a C library for the Flickr API that also provides a command-line tool, making it…fsevents-tools
fsevents-tools is a set of command-line tools for macOS built around the system's native…glbinding
C++ binding for the OpenGL APIlutok
Welcome to the Lutok project!openssl@4
Cryptography and SSL/TLS Toolkitxz
General-purpose data compression with high compression ratioCategories: Command-line Tools