Doppler MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 23 Sep 2026.
Doppler API: projects, configs, secrets.
Today is the operative word: we check Doppler MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add doppler-mcp -- npx -y doppler-mcp
{
"mcpServers": {
"doppler-mcp": {
"args": [
"-y",
"doppler-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.doppler-mcp]
command = "npx"
args = ["-y", "doppler-mcp"]
{
"mcpServers": {
"doppler-mcp": {
"args": [
"-y",
"doppler-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"doppler-mcp": {
"args": [
"-y",
"doppler-mcp"
],
"command": "npx"
}
}
}
Check a Supabase project URL shape. Secrets discarded.
Detects leaked secrets (API keys, tokens, private keys) in source code.
Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.
MCP server for VibeScan — scan projects for leaked secrets and security issues
AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
Answers built from our own checks of this server.