SecretGuard MCP
A local MCP server that scans code strings for hardcoded secrets like AWS keys, Stripe keys, and GitHub tokens before an AI agent commits them. It runs over stdio, requires no API key, and returns redacted findings to prevent secret leakage during code generation.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan code for hardcoded AWS access keys and secret keys
- Detect Stripe live keys and GitHub tokens in generated code
- Identify JWTs and private key blocks before commit
- Check for database connection strings with embedded passwords
Source and maintenance
Community listingRegistry 0.1.4
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/vladimirbakalov/secretguard-mcp/releases/download/v0.1.4-mcpb/secretguard-mcp-0.1.4.mcpb
mcpbSHA-256 supplied
https://github.com/vladimirbakalov/secretguard-mcp/releases/download/v0.1.4-mcpb/secretguard-mcp-0.1.4.mcpb package definition
{
"transport": "stdio",
"fileSha256": "bd24765f8168513640cd1b833d3ee802f16f7e5fc2c4e2f5940363e7af3e285e",
"identifier": "https://github.com/vladimirbakalov/secretguard-mcp/releases/download/v0.1.4-mcpb/secretguard-mcp-0.1.4.mcpb",
"registryType": "mcpb"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like SecretGuard MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.