trailofbits/coop

763Rust Latest

What It Calls

Calls external APIs Partial check

Without a key: Text generation (Anthropic Claude): has a branch that stops with an error without a key.

Feature matrix
Feature	Provider	Use	Default	Alternative
Text generation	Anthropic Claude 15 call sites `coop-proxy/src/proxy.rs:272` `coop-proxy/src/proxy.rs:657` `coop-proxy/src/proxy.rs:672` `coop-proxy/src/proxy.rs:691` `coop-proxy/src/proxy.rs:718` `coop-proxy/src/proxy.rs:728` 9 more	Undetermined	`api.anthropic.com`	None
Text generation · Image generation · Speech-to-text · Text-to-speech · Embeddings	OpenAI 10 call sites `coop-proxy/src/proxy.rs:270` `coop-proxy/src/proxy.rs:616` `coop-proxy/src/proxy.rs:620` `coop-proxy/src/proxy.rs:627` `coop-proxy/src/proxy.rs:633` `coop-proxy/src/proxy.rs:647` 4 more	Undetermined	`api.openai.com`	None

External APIs
API	Credential	Code evidence	Pricing	Pricing page	Checked
Anthropic Claude	Your API key	`coop-proxy/src/proxy.rs:272`A language without path tracing	Paid	Pricing	2026-10-05
OpenAI	Your API key	`coop-proxy/src/proxy.rs:270`A language without path tracing	Paid	Pricing	2026-10-05

Data sent out: What is sent could not be confirmed in the code

Fetched over the network: GitHub

Checked scope: Partial check — 67/175 files · tree not truncated · no submodules

[![external API](https://whatitcalls.reactiveworks.dev/badge/trailofbits/coop.svg)](https://whatitcalls.reactiveworks.dev/en/trailofbits/coop)

Shows as “external API · used” in a README.

Freshness detailscommit 1ded484 · checked 2026-10-07

Checked commit: 1ded484c6a7ce6e43c174e28893f1b44bc3f004f
Committed: 2026-10-07 09:30 UTC
Checked: 2026-10-07 12:12 UTC
HEAD last seen: 2026-10-07 12:11 UTC · 1ded484 (same as the checked commit)
Read depth: Basic (up to 400 files · 8 MB)
Scanner · rules: scan-5+verdict-4
Pricing catalog: version 2
Correction revision: 0
Summary: Rule sentences

What is sent out

Unconfirmed Providers whose payload was not found in the code: Anthropic Claude, OpenAI

README claims ↔ code

No README claim contradicts the code.

Code quotes

Source files are not stored. Code is linked at the checked commit on GitHub; stored quotes are at most 3 lines per evidence and 6 per file.

No code evidence to quote.

Checked scope details

1 priority file(s) not read

None

+4 more

Correction history

No corrections yet.