{
  "markdown": "# Netallion MCP Lite\n\n[![PyPI](https://img.shields.io/pypi/v/netallion-mcp-lite.svg)](https://pypi.org/project/netallion-mcp-lite/)\n[![Python](https://img.shields.io/pypi/pyversions/netallion-mcp-lite.svg)](https://pypi.org/project/netallion-mcp-lite/)\n[![CI](https://github.com/netallion/netallion-mcp-lite/actions/workflows/ci.yml/badge.svg)](https://github.com/netallion/netallion-mcp-lite/actions/workflows/ci.yml)\n[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)\n\n**Free, local, IP-safe AI-development security — an MCP server from Netallion.**\n\n<!-- mcp-name: io.github.netallion/netallion-mcp-lite -->\n\nNetallion MCP Lite is a small [Model Context Protocol](https://modelcontextprotocol.io) server that helps you and your AI coding assistants avoid the most common mistake in AI-assisted development: leaking a credential. It flags a curated set of **commodity, high-confidence** secrets and credentials (AWS, GitHub, Stripe, OpenAI, private keys, database URIs, and more) in text and files.\n\nIt runs **entirely on your machine**. No account. No data sent to Netallion. Detected secrets are **redacted** before results are returned, so they are safe to hand back into an AI assistant's context.\n\nPart of Netallion's **Agentic Development Governance** approach — secret detection is one capability, not the whole story.\n\n---\n\n## What it is (and isn't)\n\n| | **Netallion MCP Lite** (this package) | **Netallion AI Assurance** (the platform) |\n|---|---|---|\n| Price | Free | Commercial (free trial) |\n| Runs | Locally, no account | SaaS + IDE + CI |\n| Detection | ~27 commodity, high-confidence checks | Advanced detection well beyond commodity patterns |\n| AI/MCP governance | — | AI provider governance, MCP governance |\n| Policy & visibility | — | Central policy management, org-wide visibility |\n| Compliance | — | Compliance and audit evidence |\n| Data | Nothing leaves your machine | Enterprise controls |\n\nMCP Lite is deliberately limited. It is a genuinely useful local utility **and** an on-ramp: if you want advanced detection, AI/MCP governance, central policy, and audit evidence across your organisation, that lives in **[Netallion AI Assurance](https://www.netallion.ai)**.\n\nThis package does **not** contain or depend on Netallion's proprietary detection engine.\n\n---\n\n## Install & run\n\nRequires Python 3.10+.\n\n```bash\npip install netallion-mcp-lite\n# or, zero-install:\nuvx netallion-mcp-lite\n```\n\nIt speaks MCP over stdio. Add it to any MCP-compatible client (Claude, Cursor, Windsurf, VS Code, …):\n\n```json\n{\n  \"mcpServers\": {\n    \"netallion-mcp-lite\": {\n      \"command\": \"netallion-mcp-lite\"\n    }\n  }\n}\n```\n\nOptionally confine `scan_file` to a specific directory:\n\n```json\n{\n  \"mcpServers\": {\n    \"netallion-mcp-lite\": {\n      \"command\": \"netallion-mcp-lite\",\n      \"env\": { \"NETALLION_MCP_LITE_WORKSPACE_ROOT\": \"/path/to/your/project\" }\n    }\n  }\n}\n```\n\n## Tools\n\n| Tool | What it does |\n|---|---|\n| `scan_text` | Scan a string for commodity secrets; returns redacted findings (rule, severity, line/column, remediation). |\n| `scan_file` | Scan a file **inside the workspace root**; sensitive files (`.env`, keys) are refused; findings redacted. |\n| `list_supported_checks` | List the commodity checks (no secrets). |\n| `about` | About the tool, privacy posture, and Lite vs AI Assurance. |\n\nRun `list_supported_checks` to see the full set. Findings never include the full secret value.\n\n## Privacy\n\nLocal-only. No telemetry. No source, file contents, prompts, or secrets are sent anywhere. See [PRIVACY.md](PRIVACY.md).\n\n## Scope & limitations\n\n- Commodity, high-confidence formats only — it will not catch obfuscated, encoded, or org-specific secrets. That is by design; advanced detection is part of Netallion AI Assurance.\n- `scan_file` reads only within a single workspace root and refuses obviously-sensitive files.\n- No generic high-entropy scanning (it produces noise without advanced technique).\n\nWe make no claims about detection rates, false-positive rates, customer adoption, certifications, or regulatory compliance for this free utility.\n\n## Links\n\n- Netallion AI Assurance — https://www.netallion.ai\n- VS Code / Cursor / Windsurf extension — [VS Code Marketplace](https://marketplace.visualstudio.com/items?itemName=netallion.netallion-ai-assurance) · [Open VSX](https://open-vsx.org/extension/netallion/netallion-ai-assurance)\n- Azure Marketplace — [Netallion AI Assurance](https://marketplace.microsoft.com/en-us/product/netallion.netallion-ai-assurance)\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n",
  "bytes": 4567,
  "sha": "92407fc1f6397375f6dd95f97c73e1102c6e61adc19461c07b367d3bba372b52",
  "repo_slug": "netallion/netallion-mcp-lite",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_netallion_netallion_mcp_lite_fdaf4bc7/readme"
}