my-vault/00_Inbox/Untitled.md

---
created: 2026-03-16
modified: 2026-04-11
tags:
  - inbox
  - security
  - credentials
status: needs-review
---

# 2026-03-16

## Capture
<!-- Quick thoughts, links, ideas throughout the day -->
-

```
curl https://api.githubcopilot.com/models \
  -H "Authorization: Bearer ${GITHUB_API_KEY}" \
  -H "Editor-Version: vscode/1.90.0" \
  -H "Accept: application/json"

```


```
[REDACTED_GITHUB_TOKEN]
```




matrix claw

```
[REDACTED_MATRIX_TOKEN]
```

```
curl -sS \
  -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \
  "https://synapse.chans.xyz/_matrix/client/v3/account/whoami" | jq
```


```
curl -sS \
  -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \
  "https://synapse.chans.xyz/_matrix/client/v3/account/joined_rooms" | jq
```



```
curl -sS https://synapse.chans.xyz/_matrix/client/v3/login \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "m.login.password",
    "identifier": {
      "type": "m.id.user",
      "user": "@claw:chans.xyz"
    },
    "password": "[REDACTED_PASSWORD]",
    "device_id": "[REDACTED_DEVICE_ID]",
    "initial_device_display_name": "ZeroClaw Bot"
  }' | jq
```



## Questions
<!-- What am I curious about today? -->
-

## Insights
<!-- What did I learn or realize? -->
- This note previously contained plaintext credentials and tokens. They were redacted on 2026-04-11.
- Any exposed credentials captured here should be treated as compromised and rotated.

## Connections
<!-- Links to other notes or ideas -->
-

## For Tomorrow
<!-- What needs follow-up? -->
- Rotate any GitHub, Matrix, or related credentials that were previously stored here.
- Move durable command examples into a proper resource note after secrets are removed.

---
← [[2026-03-15]] | [[2026-03-17]] →

*End of day: Ask Claude Code to review and find connections*