Utility Matrix

Secrets Scanner

detect-secrets-scanner

Read-onlyIdempotent

Scan text (config, code, env files) for leaked API keys, tokens, passwords, and private keys, plus static code-risk findings such as dynamic code execution, wildcard CORS, unsafe HTML sinks, process spawning and removed security guards. Returns findings with redacted matches and severity classification.

Input Schema

TableJSON Schema

Name	Required	Description	Default
`text`	Yes	Config, code, or env file content to scan. Do not submit live production secrets; rotate any real credential that appears here.

Output Schema

TableJSON Schema

Name	Required	Description	Default
`findings`	Yes
`severity`	Yes
`next_step`	Yes
`types_found`	Yes
`finding_count`	Yes
`next_step_url`	Yes
`why_follow_up`	Yes
`interpretation`	Yes
`code_risk_count`	Yes
`affiliate_context`	No
`computation_basis`	Yes
`code_risk_findings`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 11, 2026
- changedInput schema / properties / text / maxLength
```
Previous value: -200000New value: +8192
```

Changed2 schema fields changedOct 1, 2026

changedInput schema / properties / text / description

Previous value: -"Config, code, or env file content to scan for secrets"New value: +"Config, code, or env file content to scan. Do not submit live production secrets; rotate any real credential that appears here."

addedInput schema / properties / text / maxLength
```
Added value: +200000
```

Changed4 schema fields changedSep 28, 2026

addedInput schema / properties / text / examples
```
Added value: +[
+  "example"
+]
```
addedOutput schema / properties / code_risk_count
```
Added value: +{
+  "type": "number"
+}
```

addedOutput schema / properties / code_risk_findings

Added value: +{
+  "items": {
+    "additionalProperties": false,
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "evidence_excerpt": {
+        "type": "string"
+      },
+      "severity": {
+        "enum": [
+          "HIGH",
+          "MEDIUM",
+          "LOW"
+        ],
+        "type": "string"
+      }
+    },
+    "required": [
+      "code",
+      "evidence_excerpt",
+      "severity"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

changedOutput schema / required

Previous value: -[
-  "computation_basis",
-  "finding_count",
-  "findings",
-  "interpretation",
-  "next_step",
-  "next_step_url",
-  "severity",
-  "types_found",
-  "why_follow_up"
-]New value: +[
+  "code_risk_count",
+  "code_risk_findings",
+  "computation_basis",
+  "finding_count",
+  "findings",
+  "interpretation",
+  "next_step",
+  "next_step_url",
+  "severity",
+  "types_found",
+  "why_follow_up"
+]

Changed1 schema field changedJul 15, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": false,
+  "properties": {
+    "affiliate_context": {
+      "additionalProperties": false,
+      "properties": {
+        "affiliate": {
+          "type": "string"
+        },
+        "cta_label": {
+          "type": "string"
+        },
+        "disclosure": {
+          "type": "string"
+        },
+        "framing": {
+          "type": "string"
+        },
+        "posture": {
+          "enum": [
+            "secondary"
+          ],
+          "type": "string"
+        },
+        "slot_id": {
+          "type": "string"
+        },
+        "url": {
+          "type": "string"
+        },
+        "variant": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "affiliate",
+        "cta_label",
+        "disclosure",
+        "framing",
+        "posture",
+        "slot_id",
+        "url",
+        "variant"
+      ],
+      "type": "object"
+    },
+    "computation_basis": {
+      "type": "string"
+    },
+    "finding_count": {
+      "type": "number"
+    },
+    "findings": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "line": {
+            "type": "number"
+          },
+          "redacted": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "line",
+          "redacted",
+          "type"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "interpretation": {
+      "type": "string"
+    },
+    "next_step": {
+      "type": "string"
+    },
+    "next_step_url": {
+      "type": "string"
+    },
+    "severity": {
+      "type": "string"
+    },
+    "types_found": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "why_follow_up": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "computation_basis",
+    "finding_count",
+    "findings",
+    "interpretation",
+    "next_step",
+    "next_step_url",
+    "severity",
+    "types_found",
+    "why_follow_up"
+  ],
+  "type": "object"
+}

Changed1 schema field changedJul 13, 2026
- addedInput schema / additionalProperties
```
Added value: +false
```
First observedJun 29, 2026

TDQS

Score is being calculated.

All Utility Matrix tools Inspect

Try in Browser

Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?