secretscan-mcp-server

wedo911/secretscan-mcp-server
★ 0 stars TypeScript API Integration Updated today
MCP server that scans a diff/file/snippet for leaked secrets (AWS, GitHub, Slack, Stripe, private keys, JWTs, entropy-gated generic) before an agent commits or shares it. Local-only, redacted output.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "secretscan-mcp-serve": {
      "command": "npx",
      "args": [
        "-y",
        "wedo911/secretscan-mcp-server"
      ]
    }
  }
}

README Excerpt

An [MCP](https://modelcontextprotocol.io) server that scans a diff, a file's contents, or a pasted snippet for accidentally-committed secrets -- so any MCP-compatible agent can self-check its own changes before committing, opening a PR, or pasting a log excerpt anywhere. Fully local: no API key, no network call, no dependency beyond the MCP SDK and Zod.

Tools (9)

aws_access_key_idaws_secret_access_keygeneric_assigned_secretgoogle_api_keyjwtnpm_tokenprivate_key_blockscan_for_secretsslack_token