{ "markdown": "# secrets-audit-mcp\n\n[![smithery badge](https://smithery.ai/badge/eltociear/secrets-audit-mcp)](https://smithery.ai/server/eltociear/secrets-audit-mcp) [![MCP Registry](https://img.shields.io/badge/MCP_Registry-active-2da44e)](https://registry.modelcontextprotocol.io)\n\n> MCP server that detects leaked credentials in source code. Zero dependencies. Single file.\n\n[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](LICENSE)\n[![Python 3.6+](https://img.shields.io/badge/python-3.6+-blue)](https://www.python.org/)\n[![MCP](https://img.shields.io/badge/MCP-2024--11--05-orange)](https://modelcontextprotocol.io/)\n[![Sister: skill-audit-mcp](https://img.shields.io/badge/sister-skill--audit--mcp-purple)](https://github.com/eltociear/skill-audit-mcp)\n\nDetects API keys, OAuth tokens, private keys, webhooks, and crypto wallet\nsecrets across 30+ providers (AWS, GCP, GitHub, Stripe, OpenAI, Anthropic,\nSlack, Discord, Telegram, Twilio, SendGrid, Heroku, DigitalOcean, npm,\nHuggingFace, Replicate, Cloudflare, and more).\n\nCompanion to [skill-audit-mcp](https://github.com/eltociear/skill-audit-mcp)\n(behavioral patterns) — together they cover secrets + behaviors in one\nMCP toolchain.\n\n---\n\n## Why\n\nMost secret scanners are giant Go binaries (trufflehog, gitleaks). This is\na 500-line Python file that runs as an MCP stdio server, so any LLM agent\n(Claude Desktop, Cursor, Windsurf, Cline) can ask it `scan_directory` and\nget a structured report in their tool-call response.\n\nUse cases:\n- Pre-commit hook in CI\n- Agent-driven code review (\"did this PR leak credentials?\")\n- Audit a freshly-cloned repo before opening it in your shell\n- Inline scan during agent file edits\n\n---\n\n## Install\n\n```bash\n# Python (recommended)\ngit clone https://github.com/eltociear/secrets-audit-mcp.git\npython3 secrets-audit-mcp/server.py # stdio MCP server\n\n# Or via npm wrapper (TBD)\nnpm install -g @eltociear/secrets-audit-mcp\n```\n\n### MCP client config\n\n```json\n{\n \"mcpServers\": {\n \"secrets-audit\": {\n \"type\": \"stdio\",\n \"command\": \"python3\",\n \"args\": [\"/path/to/secrets-audit-mcp/server.py\"]\n }\n }\n}\n```\n\n---\n\n## Tools\n\n| Tool | Use case |\n|---|---|\n| `scan` | Scan inline text/content |\n| `scan_file` | Scan a single file |\n| `scan_directory` | Scan a directory recursively (skips `.git`, `node_modules`, `__pycache__`, etc.) |\n\nAll return a risk score (0-100), severity bucket (`CRITICAL`/`HIGH`/`MEDIUM`/`LOW`/`SAFE`),\nand per-finding details with line numbers and redacted matches.\n\n---\n\n## Coverage\n\n**Providers** (32 rules total):\n\n- **Cloud**: AWS access/secret, GCP API key + service-account JSON, Heroku, DigitalOcean, Cloudflare\n- **Source/CI**: GitHub PAT/OAuth/App/Refresh/Fine-grained, npm tokens, Docker Hub PAT\n- **Payments**: Stripe secret + restricted\n- **Comms**: Slack bot/user/webhook, Discord bot/webhook, Telegram bot, Twilio, SendGrid, Mailgun\n- **AI/ML**: OpenAI, Anthropic, HuggingFace, Replicate\n- **Web3**: Ethereum private key (context-aware), Alchemy, Infura\n- **Keys**: RSA / EC / OpenSSH / PGP / generic PEM private keys\n- **Generic**: JWT, `apikey=\"...\"` heuristic, generic secret assignments\n\nEach match is redacted (`AKIA***MPLE`) before being returned, so the report\nitself doesn't leak the secret to the next LLM hop.\n\n---\n\n## CI usage\n\n```yaml\n- name: Secrets audit\n run: |\n python3 server.py <