Secret Scan MCP
A local-only, dependency-free MCP server that scans text for leaked credentials before an agent commits code. It detects AWS keys, GitHub tokens, API keys, and private keys without echoing secrets back, prioritizing precision to avoid blocking unattended agents with false positives.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan text for leaked credentials before an agent commits code
- Detect AWS access keys and GitHub tokens in source files
- Identify sensitive filenames like .env and SSH keys
- Prevent accidental commit of private keys and API tokens
Source and maintenance
Community listingRegistry 1.0.0
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/agentic-income-bot/mcp-secret-scan/releases/download/v1.0.0/mcp-secret-scan-1.0.0.mcpb 1.0.0
mcpbSHA-256 supplied
https://github.com/agentic-income-bot/mcp-secret-scan/releases/download/v1.0.0/mcp-secret-scan-1.0.0.mcpb package definition
{
"version": "1.0.0",
"transport": "stdio",
"fileSha256": "b29f45242bfebea7b84a03545baff9b38b996a00e4aa18c7c3e145b498b1c0df",
"identifier": "https://github.com/agentic-income-bot/mcp-secret-scan/releases/download/v1.0.0/mcp-secret-scan-1.0.0.mcpb",
"registryType": "mcpb"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like Secret Scan MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.