diff --git a/http/token-spray/api-onyphe.yaml b/http/token-spray/api-onyphe.yaml
index 64db876f06..176deaa5bb 100644
--- a/http/token-spray/api-onyphe.yaml
+++ b/http/token-spray/api-onyphe.yaml
@@ -31,6 +31,7 @@ http:
           - '"apikey":"'
           - '"apis":'
           - '"@timestamp":'
+          - '"@category":'
         condition: and
 
       - type: word