mcpbeat Sign in

Secret Scanner MCP Server

not responding

Secret Scanner is listed as active in the registry but did not answer our last check. It exposes 1 tools.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Uptime history 91 days of history · worst day 0%
91 days agonow
0.0%
Uptime 24h
0 of 91 checks
1
Tools
read from the server
8000 ms
Response time
average over 24h
open, no key
Access
streamable-http

Secret Scanner does not always answer

Over the last week it answered 0.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

run in your terminal
claude mcp add secret-scanner --transport http https://mcp.knurl.tools/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.knurl.tools/mcp
~/.codex/config.toml
[mcp_servers.secret-scanner]
url = "https://mcp.knurl.tools/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "secret-scanner": {
      "url": "https://mcp.knurl.tools/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "secret-scanner": {
      "type": "http",
      "url": "https://mcp.knurl.tools/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

scan
scan_for_secrets
Scan a pasted config, file, code snippet, or blob for exposed credentials and obvious security misconfigurations. Use whenever a user shares a .env, docker-compose.yml, nginx.conf, JSON/YAML config, or any text and asks "is this safe to share/commit?", "any leaked API keys/secrets?", or "what's misconfigured?". Detects cloud credentials, Stripe/GitHub/GitLab tokens, OpenAI/Anthropic/Gemini/Hugging Face/Groq/Replicate keys, private-key blocks, JWTs, DB connection strings, plus misconfigs like debug-on, 0.0.0.0 binds, disabled TLS verification, privileged containers, and weak passwords. Deterministic. It analyzes the provided text and returns findings only — it never stores, transmits, or requires any live credential.

Endpoints

URLTransportStateLatencyChecked
https://mcp.knurl.tools/mcp streamable-http answering 8000 ms 6 min ago

Alternatives to Secret Scanner

same job, measured the same way
Secret Scanner
by guardbee

Scans files for leaked secrets and API keys

529 installs/wk local only
Secret Scanner
by 4hmetuyar

Scans files for leaked secrets and API keys

local only
Skarn
by getskarn

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

287 installs/wk local only
Secret Scan
by agentic-income-bot

Check text for leaked credentials before an agent writes or commits it. Runs locally.

local only
Ghosthunt
by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

51 installs/wk local only
Sentrint
by sentrint

Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs

answering
LeakRank Guard
by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

70 installs/wk local only
Keyspoor
by majiayu000

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

65 installs/wk local only

Secret Scanner — questions

Answers built from our own checks of this server.

What can Secret Scanner do?
It exposes 1 tools, read directly from the server on our last check. Among them: scan_for_secrets. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Secret Scanner working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 91 checks got a reply (0.0%), average response time 8000 ms. The bar chart above shows every period we have measured.
The registry lists Secret Scanner as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect Secret Scanner?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Secret Scanner need an API key?
No. Secret Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.