Secret Scanner MCP Server

by 4hmetuyar Your server? Claim it

local only

Secret Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 11 Oct 2026.

Scans files for leaked secrets and API keys

—

Installs / week

not published

Stars

0 open issues

11 Oct 2026

Last commit

from GitHub

—

License

TypeScript

Nothing serious here today

Today is the operative word: we check Secret Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Alternatives to Secret Scanner

same job, measured the same way

Secret Scanner

by guardbee

Scans files for leaked secrets and API keys

1 370 installs/wk local only

Env Secret Exposure Analyzer MCP

by vola-trebla

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

30 installs/wk local only

Flare

by flarehq

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

45 installs/wk local only

Vibescan MCP Server

by aguantar

MCP server for VibeScan — scan projects for leaked secrets and security issues

96 installs/wk local only

Ghosthunt

by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

32 installs/wk local only

Trestle

by trestlescan

Detects leaked secrets (API keys, tokens, private keys) in source code.

29 installs/wk local only

Keyspoor

by majiayu000

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

505 installs/wk local only

LeakRank Guard

by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

43 installs/wk local only

Secret Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Secret Scanner?

Secret Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Secret Scanner open source?

We cannot say either way: written in TypeScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.