JC·HARNESS

Start Authorized Assessment

Dry run is selected by default. Real run executes bounded passive recon plus AI Gateway Hunt/Validate work after authorization, protected context, and typed confirmation are present.

Setup Wizard

Selected model and attack classes

All 44

Fable 5 · 44 classes · injection, broken-access-control, cryptographic-failures, security-misconfiguration, supply-chain-failures + 39 more

Runtime Credentials

Server credentials are used first. Browser-session keys are optional one-action overrides and are never rendered back.

0 session keys
PlatPhorm API keyserver configured

Used for real-run setup, protected integration previews, downstream PlatPhorm handoff.

Vercel AI Gateway keyserver configured

Used for model routing checks, future gateway-backed model calls.

Vercel tokenserver configured

Used for future sandbox job creation when server OIDC is unavailable.

Direct provider keys are hidden because AI Gateway is configured server-side for model execution.
No browser-session key entry is required for this deployment. Server-side credentials are ready for protected harness actions; explicit operator clicks and downstream confirmations are still required for sends and real runs.
{
  "ok": true,
  "data": {
    "credentials": [
      {
        "id": "platform",
        "label": "PlatPhorm API key",
        "envName": "PLATPHORM_API_KEY",
        "envAliases": [],
        "runtimeHeader": "x-pentest-runtime-platform-key",
        "serverConfigured": true,
        "runtimeProvided": false,
        "acceptedFor": [
          "real-run setup",
          "protected integration previews",
          "downstream PlatPhorm handoff"
        ],
        "rawValueExposed": false
      },
      {
        "id": "aiGateway",
        "label": "Vercel AI Gateway key",
        "envName": "AI_GATEWAY_API_KEY",
        "envAliases": [
          "VERCEL_AI"
        ],
        "runtimeHeader": "x-pentest-runtime-ai-gateway-key",
        "serverConfigured": true,
        "runtimeProvided": false,
        "acceptedFor": [
          "model routing checks",
          "future gateway-backed model calls"
        ],
        "rawValueExposed": false
      },
      {
        "id": "anthropic",
        "label": "Anthropic API key",
        "envName": "ANTHROPIC_API_KEY",
        "envAliases": [],
        "runtimeHeader": "x-pentest-runtime-anthropic-key",
        "serverConfigured": false,
        "runtimeProvided": false,
        "acceptedFor": [
          "future direct Anthropic model calls"
        ],
        "rawValueExposed": false
      },
      {
        "id": "openai",
        "label": "OpenAI API key",
        "envName": "OPENAI_API_KEY",
        "envAliases": [],
        "runtimeHeader": "x-pentest-runtime-openai-key",
        "serverConfigured": false,
        "runtimeProvided": false,
        "acceptedFor": [
          "future direct OpenAI model calls"
        ],
        "rawValueExposed": false
      },
      {
        "id": "vercel",
        "label": "Vercel token",
        "envName": "VERCEL_TOKEN",
        "envAliases": [],
        "runtimeHeader": "x-pentest-runtime-vercel-token",
        "serverConfigured": true,
        "runtimeProvided": false,
        "acceptedFor": [
          "future sandbox job creation when server OIDC is unavailable"
        ],
        "rawValueExposed": false
      }
    ]
  }
}
Result
No run launched yet.