secret-scanner
Server Details
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 68.1% over 74 days
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
Scored across 1 tool
With only one tool, there is no possibility of confusion. scan_for_secrets has a clear, singular purpose of analyzing text for secrets and misconfigurations.
The single tool uses a clear verb_noun pattern (scan_for_secrets), and there are no other tools to create inconsistency.
The server has only one tool, which is slightly below the typical range, but the tool is comprehensive and handles a wide variety of inputs and detections, making the count reasonable.
The tool covers the full scope of the secret scanner domain, detecting a wide range of credentials and misconfigurations and returning findings. There are no obvious gaps for the stated purpose.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
scan_for_secrets
Related MCP Connectors
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Scan and monitor websites for leaked keys, exposed files, security headers, SEO issues and uptime.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Related MCP Servers
- AlicenseAqualityCmaintenanceScans diffs, files, and snippets for leaked secrets like AWS keys, GitHub tokens, and private keys, returning redacted findings while running fully locally without network calls.1MIT

Clotr Guardofficial
AlicenseNot gradedqualityAmaintenanceChecks text for credentials and personal details on your device, before it goes anywhere. Runs locally over stdio and opens no network connection.8AGPL 3.0- AlicenseNot gradedqualityFmaintenanceScans files, directories, and environment configurations for exposed secrets, API keys, and credentials, redacting matches and providing allowlist support. Enables natural-language secret detection in projects and CI/CD integration via CLI.1,192 npmMIT
- AlicenseNot gradedqualityBmaintenanceDetects leaked credentials in source code with tools to scan text, files, and directories for API keys, tokens, and private keys across 30+ providers.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.