--- created: 2026-03-16 modified: 2026-04-11 tags: - inbox - security - credentials status: needs-review --- # 2026-03-16 ## Capture - ``` curl https://api.githubcopilot.com/models \ -H "Authorization: Bearer ${GITHUB_API_KEY}" \ -H "Editor-Version: vscode/1.90.0" \ -H "Accept: application/json" ``` ``` [REDACTED_GITHUB_TOKEN] ``` matrix claw ``` [REDACTED_MATRIX_TOKEN] ``` ``` curl -sS \ -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \ "https://synapse.chans.xyz/_matrix/client/v3/account/whoami" | jq ``` ``` curl -sS \ -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \ "https://synapse.chans.xyz/_matrix/client/v3/account/joined_rooms" | jq ``` ``` curl -sS https://synapse.chans.xyz/_matrix/client/v3/login \ -H 'Content-Type: application/json' \ -d '{ "type": "m.login.password", "identifier": { "type": "m.id.user", "user": "@claw:chans.xyz" }, "password": "[REDACTED_PASSWORD]", "device_id": "[REDACTED_DEVICE_ID]", "initial_device_display_name": "ZeroClaw Bot" }' | jq ``` ## Questions - ## Insights - This note previously contained plaintext credentials and tokens. They were redacted on 2026-04-11. - Any exposed credentials captured here should be treated as compromised and rotated. ## Connections - ## For Tomorrow - Rotate any GitHub, Matrix, or related credentials that were previously stored here. - Move durable command examples into a proper resource note after secrets are removed. --- ← [[2026-03-15]] | [[2026-03-17]] → *End of day: Ask Claude Code to review and find connections*