Secret Scan MCP Server: Install & Setup

Install Secret Scan in Claude Code

Claude Code

curl -LO https://github.com/agentic-income-bot/mcp-secret-scan/releases/download/v1.0.0/mcp-secret-scan-1.0.0.mcpb

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

Download mcp-secret-scan-1.0.0.mcpb and double-click it to install in Claude Desktop.

MCP Bundles install in one click in Claude Desktop. Download the file, then open it.

Check text for leaked credentials before an agent writes or commits it. Runs locally.

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

Run: curl -LO https://github.com/agentic-income-bot/mcp-secret-scan/releases/download/v1.0.0/mcp-secret-scan-1.0.0.mcpb

sudo-ai-git/mcp-secret-scrub

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

irrenwill/secret-safe-env

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

securenow-ai/securenow-npm

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

avhn/secret

Local, read-only, names-only secret metadata for explicitly approved stores. Never returns values.

pratham-jain33/security-mcp

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

Timwal78/scriptdocs-mcp-server

Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.