IA-QA — 152 QA & Dev Tools for AI Agents

detect_secrets

Read-onlyIdempotent

Scan code or config files for hardcoded secrets: AWS keys, GitHub tokens, OpenAI/Anthropic API keys, Stripe secrets, JWTs, Slack/Teams/Discord webhook URLs, session cookies, database connection strings, and generic passwords. Returns findings with severity.

Input Schema

Name	Required	Description	Default
`input`	Yes	Code or config content to scan (max 500KB)
`filename`	No	Optional filename for context (e.g. ".env", "config.js")

Output Schema

Name	Required	Description	Default
`filename`	No
`findings`	No
`risk_level`	No
`recommendation`	No
`total_findings`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 31, 2026

addedInput schema / examples

Added value: +[
+  {
+    "input": "redis://cache:6379"
+  }
+]

Changed1 schema field changedJun 21, 2026

addedOutput schema / properties

Added value: +{
+  "filename": {},
+  "findings": {},
+  "recommendation": {},
+  "risk_level": {},
+  "total_findings": {
+    "type": "number"
+  }
+}

Changed1 schema field changedJun 10, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "type": "object"
+}

First observedMay 26, 2026

TDQS

Score is being calculated.

All IA-QA — 152 QA & Dev Tools for AI Agents tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.