Secret Scrub MCP Server: Install & Setup

Install Secret Scrub in Claude Code

Claude Code

claude mcp add secret-scrub -- uvx mcp-secret-scrub

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "secret-scrub": {
      "command": "uvx",
      "args": [
        "mcp-secret-scrub"
      ]
    }
  }
}

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

Run: claude mcp add secret-scrub -- uvx mcp-secret-scrub

securenow-ai/securenow-npm

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

agentic-income-bot/mcp-secret-scan

Check text for leaked credentials before an agent writes or commits it. Runs locally.

pratham-jain33/security-mcp

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

irrenwill/secret-safe-env

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

CallMarcus/security-scorecard-mcp

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

avhn/secret

Local, read-only, names-only secret metadata for explicitly approved stores. Never returns values.