my-vault/00_Inbox/Untitled.md

created, modified, tags, status

created	modified	tags	status
2026-03-16	2026-04-11	inbox security credentials	needs-review

2026-03-16

Capture

curl https://api.githubcopilot.com/models \
  -H "Authorization: Bearer ${GITHUB_API_KEY}" \
  -H "Editor-Version: vscode/1.90.0" \
  -H "Accept: application/json"

[REDACTED_GITHUB_TOKEN]

matrix claw

[REDACTED_MATRIX_TOKEN]

curl -sS \
  -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \
  "https://synapse.chans.xyz/_matrix/client/v3/account/whoami" | jq

curl -sS \
  -H "Authorization: Bearer [REDACTED_MATRIX_ACCESS_TOKEN]" \
  "https://synapse.chans.xyz/_matrix/client/v3/account/joined_rooms" | jq

curl -sS https://synapse.chans.xyz/_matrix/client/v3/login \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "m.login.password",
    "identifier": {
      "type": "m.id.user",
      "user": "@claw:chans.xyz"
    },
    "password": "[REDACTED_PASSWORD]",
    "device_id": "[REDACTED_DEVICE_ID]",
    "initial_device_display_name": "ZeroClaw Bot"
  }' | jq

Questions

Insights

• This note previously contained plaintext credentials and tokens. They were redacted on 2026-04-11.
• Any exposed credentials captured here should be treated as compromised and rotated.

Connections

For Tomorrow

• Rotate any GitHub, Matrix, or related credentials that were previously stored here.
• Move durable command examples into a proper resource note after secrets are removed.

---

← 2026-03-15 | 2026-03-17 →

End of day: Ask Claude Code to review and find connections