Secret Scanner MCP Server

by guardbee Your server? Claim it

local only

Secret Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 1 370 installs a week from npm. Last commit 11 Oct 2026.

Scans files for leaked secrets and API keys

Installs per day peak 920 · avg 111 · -0% w/w

a month agotoday

1 370

Installs / week

npm · @guardbee/mcp-secret-scanner

Stars

0 open issues

11 Oct 2026

Last commit

27 releases in 90 days

—

License

TypeScript

Nothing serious here today

Today is the operative word: we check Secret Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add secret-scanner -- npx -y @guardbee/mcp-secret-scanner

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "secret-scanner": {
      "args": [
        "-y",
        "@guardbee/mcp-secret-scanner"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.secret-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-secret-scanner"]

.cursor/mcp.json

{
  "mcpServers": {
    "secret-scanner": {
      "args": [
        "-y",
        "@guardbee/mcp-secret-scanner"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "secret-scanner": {
      "args": [
        "-y",
        "@guardbee/mcp-secret-scanner"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Secret Scanner

same job, measured the same way

Secret Scanner

by 4hmetuyar

Scans files for leaked secrets and API keys

local only

Env Secret Exposure Analyzer MCP

by vola-trebla

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

30 installs/wk local only

Flare

by flarehq

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

45 installs/wk local only

Vibescan MCP Server

by aguantar

MCP server for VibeScan — scan projects for leaked secrets and security issues

96 installs/wk local only

Ghosthunt

by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

32 installs/wk local only

Trestle

by trestlescan

Detects leaked secrets (API keys, tokens, private keys) in source code.

29 installs/wk local only

Keyspoor

by majiayu000

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

505 installs/wk local only

LeakRank Guard

by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

43 installs/wk local only

Secret Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Secret Scanner?

Secret Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-secret-scanner was installed 1 370 times last week.

How do I connect Secret Scanner?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @guardbee/mcp-secret-scanner straight from npm; nothing to host, nothing to sign up for.

How many people use Secret Scanner?

The npm package @guardbee/mcp-secret-scanner was installed 1 370 times in the last week. Week over week that is -0%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Secret Scanner open source?

We cannot say either way: written in TypeScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.