Hardcoded Credential Audit MCP Server

by jmshinhwa Your server? Claim it

local only

Hardcoded Credential Audit runs on your own machine — the client starts it, so there is no endpoint to ping. 303 installs a week from npm. Last commit 22 Sep 2026.

Open any config file and see every hardcoded credential — and every setting that quietly undoes your

Installs per day peak 147 · avg 10

a month agotoday

303

Installs / week

npm · @readystack/hardcoded-credential-audit

Stars

0 open issues

22 Sep 2026

Last commit

0 releases in 90 days

—

License

JavaScript

Nothing serious here today

Today is the operative word: we check Hardcoded Credential Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add hardcoded-credential-audit -- npx -y @readystack/hardcoded-credential-audit

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "hardcoded-credential-audit": {
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.hardcoded-credential-audit]
command = "npx"
args = ["-y", "@readystack/hardcoded-credential-audit"]

.cursor/mcp.json

{
  "mcpServers": {
    "hardcoded-credential-audit": {
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "hardcoded-credential-audit": {
      "args": [
        "-y",
        "@readystack/hardcoded-credential-audit"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Hardcoded Credential Audit

same job, measured the same way

Security Headers Csp Lint

by jmshinhwa

Reads security headers and CSP line by line in your config file and names the lines that silently do

333 installs/wk local only

Cron Schedule Lint

by jmshinhwa

Names every schedule line in the file you have open that fires at the wrong hour, twice, or never at

376 installs/wk local only

Cloud Cost Landmine Lint

by jmshinhwa

Names every line in the file you have open that starts a recurring cloud charge, with the published

342 installs/wk local only

Ghosthunt

by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

37 installs/wk local only

Secrets-LE

by nolindnaidoo

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

38 installs/wk local only

Agentprofile

by everyai-com

One profile — skills, credentials, and memory — synced to every agent tool via one MCP URL.

answering

Openfinance Br MCP

by brunovicco

Secure Open Finance Brasil MCP server with typed tools and a credential-free mock mode

69 installs/wk local only

Figsnap MCP

by arimunandar

The Figma file you have open, as MCP tools. Extract, edit, and keep a saved set.

44 installs/wk local only

Hardcoded Credential Audit — questions

Answers built from our own checks of this server.

Why is there no uptime for Hardcoded Credential Audit?

Hardcoded Credential Audit runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @readystack/hardcoded-credential-audit was installed 303 times last week.

How do I connect Hardcoded Credential Audit?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @readystack/hardcoded-credential-audit straight from npm; nothing to host, nothing to sign up for.

How many people use Hardcoded Credential Audit?

The npm package @readystack/hardcoded-credential-audit was installed 303 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Hardcoded Credential Audit open source?

We cannot say either way: written in JavaScript and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.