Secret Hygiene MCP Server

by mrfentmen Your server? Claim it

local only

Secret Hygiene MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 65 installs a week from npm.

Count secret-like patterns in bounded local files without returning values, keys, paths,...

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 186 · avg 16 · +26% w/w

a month agotoday

Installs / week

npm · secret-hygiene-mcp

—

Stars

on GitHub

—

Last commit

3 releases in 90 days

—

License

language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add secret-hygiene-mcp -- npx -y secret-hygiene-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "secret-hygiene-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "secret-hygiene-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.secret-hygiene-mcp]
command = "npx"
args = ["-y", "secret-hygiene-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "secret-hygiene-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "secret-hygiene-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "secret-hygiene-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "secret-hygiene-mcp"
      ]
    }
  }
}

Alternatives to Secret Hygiene MCP

same job, measured the same way

CookieGuard

by aiscihub

Audit HTTP cookie security against your local policy. Returns findings without cookie values.

local only

Keyfold

by codewithkolin

Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.

local only

Secret Handoff

by geland

Let agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.

local only

lanternkb

by ankitb073

Private, local search over your own files, by meaning and keywords, with secrets redacted.

110 installs/wk local only

HTTP Header Policy Check — HSTS, CSP & Frame Declarations

by kriton-dev

Check seven declared HTTP security header families without returning raw values

answering

Secret

by avhn

Local, read-only, names-only secret metadata for explicitly approved stores. Never returns values.

local only

kdbx

by yarrasys

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

local only

API Key Case

by melavern

Local MCP tools for secret status and guarded deployment. Values never reach the agent.

138 installs/wk local only

Secret Hygiene MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Secret Hygiene MCP?

Secret Hygiene MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package secret-hygiene-mcp was installed 65 times last week.

Is Secret Hygiene MCP still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect Secret Hygiene MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls secret-hygiene-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use Secret Hygiene MCP?

The npm package secret-hygiene-mcp was installed 65 times in the last week. Week over week that is +26%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.