Hardcoded Credential Audit MCP Server

by jmshinhwa Your server? Claim it

local only

Hardcoded Credential Audit runs on your own machine — the client starts it, so there is no endpoint to ping. 137 installs a week from npm. Last commit 2 Nov 2026.

Open any config file and see every hardcoded credential — and every setting that quietly undoes your

Installs per day peak 55 · avg 8 · +154% w/w

a month agotoday

137

Installs / week

npm · @readystack/hardcoded-credential-audit

Stars

0 open issues

2 Nov 2026

Last commit

5 releases in 90 days

—

License

JavaScript

Nothing serious here today

Today is the operative word: we check Hardcoded Credential Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add hardcoded-credential-audit -- npx -y @readystack/hardcoded-credential-audit

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "hardcoded-credential-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.hardcoded-credential-audit]
command = "npx"
args = ["-y", "@readystack/hardcoded-credential-audit"]

.cursor/mcp.json

{
  "mcpServers": {
    "hardcoded-credential-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "hardcoded-credential-audit": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ]
    }
  }
}

Alternatives to Hardcoded Credential Audit

same job, measured the same way

Security Headers Csp Lint

by jmshinhwa

Reads security headers and CSP line by line in your config file and names the lines that silently do

176 installs/wk local only

Cron Schedule Lint

by jmshinhwa

Names every schedule line in the file you have open that fires at the wrong hour, twice, or never at

218 installs/wk local only

Cloud Cost Landmine Lint

by jmshinhwa

Names every line in the file you have open that starts a recurring cloud charge, with the published

154 installs/wk local only

Ghosthunt

by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

50 installs/wk local only

OpenMyMemo

by mymemoai

Your AI memory as a local folder you own. Every app shares it; you see and can undo each change.

914 installs/wk local only

Hamloy

by hamloy

See what every AI agent is doing and what's waiting on you: one to-do list for agents and your team

answering

Consult

by neelsatyavolu

Get a second opinion on your code from every coding agent you have. No API keys.

373 installs/wk local only

Secrets-LE

by nolindnaidoo

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

113 installs/wk local only

Hardcoded Credential Audit — questions

Answers built from our own checks of this server.

Why is there no uptime for Hardcoded Credential Audit?

Hardcoded Credential Audit runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @readystack/hardcoded-credential-audit was installed 137 times last week.

How do I connect Hardcoded Credential Audit?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @readystack/hardcoded-credential-audit straight from npm; nothing to host, nothing to sign up for.

How many people use Hardcoded Credential Audit?

The npm package @readystack/hardcoded-credential-audit was installed 137 times in the last week. Week over week that is +154%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Hardcoded Credential Audit open source?

We cannot say either way: written in JavaScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.