# Data Types Reference (Scalars)

Escape scanners support `232` types of data (`100` Low, `27` Medium, `105` High), named `scalars`. Here is a list of all the supported types.

> [!TIP]
>
> **Custom Data Types**
>
> To define your own Data Types (Scalars) and Payloads, check out the `Custom Payloads` documentation section.

## date time Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `date` | ISO 8601 date string | `low` |
| `datetime` | ISO 8601 date and time string | `low` |
| `duration` | Duration | `low` |
| `month` | Month | `low` |
| `time` | ISO 8601 time string | `low` |
| `timestamp` | Timestamp | `low` |
| `year` | Year | `low` |

## saas Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `amount` | Amount | `low` |
| `application` | Application or Product Name | `low` |
| `author` | author name | `low` |
| `category` | Classification or grouping label for items or content | `low` |
| `coupon_code` | coupon code | `low` |
| `delivery_method` | Delivery method | `low` |
| `discount` | Discount | `low` |
| `e_commerce_indicator` | e-Commerce Indicator | `low` |
| `event_type` | Event type | `low` |
| `fee` | fee | `low` |
| `form` | Form identifier or type | `low` |
| `html_body` | HTML body | `low` |
| `isbn` | International Standard Book Number | `low` |
| `item` | Individual item identifier, used in e-commerce or inventories | `low` |
| `join` | Joining or membership option | `low` |
| `merchant` | merchant name | `low` |
| `navigation` | Page number or name in a series or navigation | `low` |
| `permission` | permission | `low` |
| `plan` | Plan or subscrption type | `low` |
| `policy` | policy name | `low` |
| `price` | Price | `low` |
| `reference` | Reference identifier, often used in tracking or linking | `low` |
| `role` | member type | `low` |
| `search` | Search parameter for text or keyword search in applications | `low` |
| `serial_number` | serial number | `low` |
| `status` | status | `low` |
| `status_message` | Status, error message and additional info | `low` |
| `title` | Title or heading, often used in articles, books or web pages | `low` |
| `view` | View mode or perspective, often used in user interfaces | `low` |

## technology Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `authentication` | authentication | `low` |
| `authorization_code` | authorization code | `low` |
| `bearer` | Bearer | `medium` |
| `bearer_uuid` | Bearer with UUID | `high` |
| `boolean_wannabe` | Looks like a boolean but not a boolean | `low` |
| `command` | Command input, often used in interfaces that accept system commands | `medium` |
| `confirmation_code` | confirmation code | `low` |
| `content_type` | Content Type | `low` |
| `cuid` | Globally Unique Identifier | `low` |
| `device_name` | Device name | `low` |
| `device_type` | Device type | `low` |
| `did` | Decentralized Identifiers | `low` |
| `directory` | Disk or URL Path or Directory | `low` |
| `environment` | Environment parameter for specifying the deployment or operation environment | `low` |
| `file` | File name | `low` |
| `func` | Functional command or method call in applications | `low` |
| `hex_color_code` | Hex Color Code | `low` |
| `hexadecimal` | Hexadecimal | `low` |
| `host` | Host name (IP or DNS) | `medium` |
| `hsl` | Hue, Saturation, Lightness | `low` |
| `hsla` | Hue, Saturation, Lightness, Alpha | `low` |
| `http_method` | http method | `low` |
| `ipc_patent` | IPC Patent | `medium` |
| `ipv4` | IPv4 address | `medium` |
| `ipv6` | IPv6 address | `medium` |
| `json` | JSON string | `low` |
| `language_iso_639_1` | Language | `low` |
| `language_iso_639_2` | Language ISO 639-2 | `low` |
| `limit` | Limit number | `low` |
| `llm_input` | Potential LLM input | `low` |
| `locale` | BCP 47 Locale | `low` |
| `mac` | Mac Address | `medium` |
| `mask` | Mask Pattern | `low` |
| `mongo_db_object_id` | Mongo DB Object ID | `low` |
| `offset` | Start offset number | `low` |
| `pin_code` | Pin Code | `low` |
| `port` | Port number | `low` |
| `protocol` | Protocol | `low` |
| `reason_code` | reason code | `low` |
| `return_type` | Return type | `low` |
| `rgb` | RGB Color Code | `low` |
| `rgba` | RGBA Color Code | `low` |
| `secret` | Secret | `high` |
| `slug` | Slug or identifier in forums or message boards | `low` |
| `software_component` | Software or library name | `low` |
| `ssh_url` | SSH URL | `medium` |
| `status_code` | Status Code | `low` |
| `uri` | A URI as defined by RFC 1738 | `low` |
| `url` | A URL as defined by RFC 1738 | `low` |
| `user_agent` | user agent | `low` |
| `uuid` | Universally Unique Identifier | `low` |
| `version` | Semver | `low` |

## Pci financial Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `bank` | bank name | `low` |
| `bank_account` | International Bank Account Number | `medium` |
| `bank_card` | Credit Card Number | `high` |
| `bitcoin` | Bitcoin address | `medium` |
| `card_type` | Card type or transaction type | `low` |
| `currency_code` | Currency Code ISO 4217 | `low` |
| `dash` | Dash address | `medium` |
| `ethereum` | Ethereum address | `medium` |
| `monero` | Monero address | `medium` |
| `shipping_method` | Shipping method | `low` |
| `us_bank_account_number` | US Bank Account Number | `medium` |
| `us_bank_routing_number` | US Bank Routing Number | `medium` |
| `us_zip_code` | US ZIP Code | `low` |

## Phi health Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `health_insurance_number` | health insurance number | `low` |
| `medical_record_number` | unique identifier assigned to a patient's medical record | `high` |
| `prescription_number` | unique number assigned to a medication order (Rx) | `high` |
| `social_security_number` | social security number | `low` |

## Pii personal Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `body_type` | body type | `low` |
| `document_type` | Document type | `low` |
| `driving_license` | Driving License Number | `medium` |
| `email` | Email | `medium` |
| `french_phone` | Phone Number | `medium` |
| `gender` | Gender | `low` |
| `identity_number` | identity number | `low` |
| `legal_name` | Full legal name | `low` |
| `passport` | Passport Number | `medium` |
| `password` | Password | `high` |
| `phone` | Phone Number | `medium` |
| `username` | Username | `low` |
| `vehicle_type` | Vehicle type | `low` |

## Primitives openapi Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `id` | Identifier | `low` |

## Primitives payload Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `unsanitized_payload` | Unsanitized Payload | `low` |

## Secrets Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `adobe_client_id` | Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches. | `high` |
| `adobe_client_secret` | Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation. | `high` |
| `age_secret_key` | Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information. | `high` |
| `algolia_api_key` | Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms. | `high` |
| `alibaba_access_key_id` | Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise. | `high` |
| `alibaba_secret_key` | Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud. | `high` |
| `asana_client_id` | Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information. | `high` |
| `asana_client_secret` | Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access. | `high` |
| `atlassian_api_token` | Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality. | `high` |
| `aws_access_token` | Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms. | `high` |
| `aws_mws_id` | Amazon Marketplace Web Service identifier | `low` |
| `beamer_api_token` | Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates. | `high` |
| `bitbucket_client_id` | Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure. | `high` |
| `bitbucket_client_secret` | Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access. | `high` |
| `clojars_api_token` | Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation. | `high` |
| `contentful_delivery_api_token` | Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity. | `high` |
| `databricks_api_token` | Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing. | `high` |
| `datadog_access_token` | Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation. | `high` |
| `digitalocean_pat` | Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy. | `high` |
| `doppler_api_token` | Discovered a Doppler API token, posing a risk to environment and secrets management security. | `high` |
| `dropbox_api_token` | Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage. | `high` |
| `dropbox_long_lived_api_token` | Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data. | `high` |
| `dropbox_short_lived_api_token` | Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation. | `high` |
| `duffel_api_token` | Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data. | `high` |
| `dynatrace_api_token` | Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure. | `high` |
| `easypost_api_token` | Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure. | `high` |
| `easypost_test_api_token` | Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data. | `high` |
| `etsy_access_token` | Found an Etsy Access Token, potentially compromising Etsy shop management and customer data. | `high` |
| `facebook` | Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure. | `high` |
| `fastly_api_token` | Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues. | `high` |
| `finicity_api_token` | Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations. | `high` |
| `finicity_client_secret` | Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches. | `high` |
| `flickr_access_token` | Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage. | `high` |
| `flutterwave_encryption_key` | Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information. | `high` |
| `flutterwave_secret_key` | Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches. | `high` |
| `frameio_api_token` | Found a Frame.io API token, potentially compromising video collaboration and project management. | `high` |
| `gcp_api_key` | Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches. | `high` |
| `geocodio` | Geocodio API key | `high` |
| `github_app_token` | Identified a GitHub App Token, which may compromise GitHub application integrations and source code security. | `high` |
| `github_fine_grained_pat` | Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation. | `high` |
| `github_oauth` | Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks. | `high` |
| `github_pat` | Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure. | `high` |
| `github_refresh_token` | Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services. | `high` |
| `gitlab_pat` | Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure. | `high` |
| `gitlab_rrt` | Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access. | `high` |
| `grafana_api_key` | Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics. | `high` |
| `grafana_service_account_token` | Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity. | `high` |
| `graphcms` | API key for accessing GraphCMS API | `medium` |
| `hashicorp_tf_api_token` | Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches. | `high` |
| `heroku_api_key` | Detected a Heroku API Key, potentially compromising cloud application deployments and operational security. | `high` |
| `hubspot_api_key` | Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations. | `high` |
| `instagram_oauth` | Instagram OAuth token identifier | `medium` |
| `intercom_api_key` | Identified an Intercom API Token, which could compromise customer communication channels and data privacy. | `high` |
| `ipstack_token` | unique identifier and access token for using IPStack's services. | `high` |
| `jfrog_api_key` | Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines. | `high` |
| `jiratoken` | Jiratoken is an API key used for authentication and access control in Jira, a project management and issue tracking platform. It provides access to various functionality such as creating, updating, and managing issues, creating and updating projects, and managing user permissions. | `medium` |
| `jwt` | JSON Web Token | `high` |
| `launchdarkly_access_token` | Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality. | `high` |
| `linear_api_key` | Detected a Linear API Token, posing a risk to project management tools and sensitive task data. | `high` |
| `linear_client_secret` | Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data. | `high` |
| `linkedin_client_secret` | Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data. | `high` |
| `lob_api_key` | Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services. | `high` |
| `mailchimp_api_key` | Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data. | `high` |
| `mailgun_private_api_token` | Found a Mailgun private API token, risking unauthorized email service operations and data breaches. | `high` |
| `mailgun_signing_key` | Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity. | `high` |
| `messagebird_api_token` | Found a MessageBird API token, risking unauthorized access to communication platforms and message data. | `high` |
| `microsoft_teams_webhook` | Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks. | `high` |
| `netlify_access_token` | Detected a Netlify Access Token, potentially compromising web hosting services and site management. | `high` |
| `new_relic_user_api_id` | Found a New Relic user API ID, posing a risk to application monitoring services and data integrity. | `high` |
| `npm_access_token` | Uncovered an npm access token, potentially compromising package management and code repository access. | `high` |
| `okta_access_token` | Identified an Okta Access Token, which may compromise identity management services and user authentication data. | `high` |
| `openai_api_key` | Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation. | `high` |
| `paypaloauth` | Paypaloauth is an API key used for PayPal's authentication process. | `high` |
| `planetscale_api_token` | Identified a PlanetScale API token, potentially compromising database management and operations. | `high` |
| `planetscale_password` | Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches. | `high` |
| `postman_api_token` | Uncovered a Postman API token, potentially compromising API testing and development workflows. | `high` |
| `private_key` | Identified a Private Key, which may compromise cryptographic security and sensitive data encryption. | `high` |
| `pubnubpublishkey` | The PubNub Publish Key is used to authenticate and authorize the publisher to send messages using PubNub's messaging service. | `medium` |
| `pulumi_api_token` | Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management. | `high` |
| `pypi_upload_token` | Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity. | `high` |
| `rubygems_api_token` | Identified a Rubygem API token, potentially compromising Ruby library distribution and package management. | `high` |
| `sendgrid_api_token` | Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure. | `high` |
| `sendinblue_api_token` | Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy. | `high` |
| `sentry_access_token` | Found a Sentry Access Token, risking unauthorized access to error tracking services and sensitive application data. | `high` |
| `shippo_api_token` | Discovered a Shippo API token, potentially compromising shipping services and customer order data. | `high` |
| `shopify_access_token` | Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches. | `high` |
| `shopify_custom_access_token` | Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security. | `high` |
| `shopify_private_app_access_token` | Identified a Shopify private app access token, risking unauthorized access to private app data and store operations. | `high` |
| `shopify_shared_secret` | Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security. | `high` |
| `sidekiq_secret` | Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches. | `high` |
| `slack_bot_token` | Identified a Slack Bot token, which may compromise bot integrations and communication channel security. | `high` |
| `slack_legacy_workspace_token` | Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features. | `high` |
| `slack_user_token` | Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces. | `high` |
| `slack_webhook_url` | Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels. | `high` |
| `stripe_access_token` | Stripe private token | `high` |
| `sumologic_access_token` | Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights. | `high` |
| `thinkific` | Thinkific API key | `medium` |
| `twilio_api_key` | Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data. | `high` |
| `twitch_api_token` | Discovered a Twitch API token, which could compromise streaming services and account integrations. | `high` |
| `twitter_api_key` | Identified a Twitter API Key, which may compromise Twitter application integrations and user data security. | `high` |
| `typeform_api_token` | Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection. | `high` |
| `vault_service_token` | Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials. | `high` |
| `youtubeapikey` | This api key is used for accessing the YouTube API and provides access to various functionalities and data on the YouTube platform. | `medium` |
| `zendesk_secret_key` | Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data. | `high` |

## Secrets hash Data Types

| Name | Description | Sensitivity |
| --- | --- | --- |
| `base64` | base64 hash | `low` |
| `bcrypt` | bCrypt hash | `high` |
| `commit_hash` | Commit Hash | `low` |
| `hash` | Block hash | `low` |
| `md5` | MD5 hash | `medium` |
| `sha1` | SHA1 hash | `low` |
| `sha256` | SHA256 hash | `low` |