How do I install the secrets mcp server?

This profile does not contain a verified copy-paste launch configuration. Follow the current project documentation to confirm the runtime, entry point, transport and authentication before registering it in your client.

SSyncDev

Start a project

Secrets MCP Server

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

Remote serverstreamable-httpPython

What is the Secrets MCP Server?

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

What you get

Detects API keys, OAuth tokens, private keys, webhooks, and crypto wallet secrets across 30+ providers (AWS, GCP, GitHub, Stripe, OpenAI, Anthropic, Slack, Discord, Telegram, Twilio, SendGrid, Heroku, DigitalOcean, npm, HuggingFace, Replicate, Cloudflare, and more).

Pre-commit hook in CI
Agent-driven code review ("did this PR leak credentials?")
Audit a freshly-cloned repo before opening it in your shell
Inline scan during agent file edits

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
name	Secrets audit
scan	Scan inline text/content
scan_file	Scan a single file
scan_directory	Scan a directory recursively (skips .git, node_modules, __pycache__, etc.)

Example prompts to try

“Use Secrets to name.”
“Use Secrets to scan.”
“Use Secrets to scan file.”

Frequently asked questions

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.