Which integrations are available for this server?

Detects exposed Docker Hub access tokens in scanned code and environment files. Detects exposed GitHub personal access tokens and other GitHub secrets in scanned content. Can be added as a GitHub Actions workflow step to scan code for secrets on pushes and pull requests. Detects exposed GitLab tokens and can be used as a GitLab CI job to fail on exposed secrets. Detects exposed MongoDB connection URIs in scanned files and configuration. Detects exposed MySQL connection URLs in scanned files and configuration. Detects exposed npm registry tokens in scanned code and environment files. Detects exposed OpenAI API keys in scanned text, files, directories, and environment configurations. Detects exposed PostgreSQL connection URLs in scanned files and configuration. Provides a pre-commit hook that runs the secret scanner to block commits containing critical secrets. Detects exposed Redis connection URLs in scanned files and configuration. Detects exposed SendGrid API keys in scanned content. Detects exposed Slack bot tokens in scanned content. Detects exposed Stripe secret and publishable keys in scanned content. Detects exposed Twilio auth tokens in scanned content. Detects exposed Vercel tokens in scanned code and environment files.

How do I use @guardbee/mcp-secret-scanner?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@@guardbee/mcp-secret-scanner Scan the current directory for exposed API keys and secrets" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

@guardbee/mcp-secret-scanner

npm version npm downloads License: MIT

Kaynak dosyalarınızı, dizinleri ve ortam konfigürasyonlarını açık API key, parola, token ve diğer gizli bilgiler açısından tarayan MCP sunucusu. Claude'a doğrudan projenizden secret sızdırıp sızdırmadığınızı sorabilirsiniz.

Özellikler

40+ Secret Deseni — AWS, GitHub, GitLab, Stripe, OpenAI, Anthropic, HuggingFace, Slack, Twilio, SendGrid ve daha fazlası
Dosya & Dizin Tarama — Tek dosya veya tüm proje ağacı
Akıllı Atlama — node_modules, .git, dist, build, .next gibi dizinler otomatik atlanır
Güvenli Redaksyon — Eşleşmeler ilk 4 + yıldız + son 4 karakter olarak gösterilir
Allowlist Desteği — Bilinen test/sahte değerleri beyaz listeye alın
16 Unit Test — %100 geçen test paketi

Related MCP server: netallion-mcp-lite

Hızlı Başlangıç

npm install -g @guardbee/mcp-secret-scanner

claude_desktop_config.json dosyasına ekleyin:

{
  "mcpServers": {
    "guardbee-secret-scanner": {
      "command": "npx",
      "args": ["-y", "@guardbee/mcp-secret-scanner"]
    }
  }
}

MCP Tools

Tool	Açıklama
`scan_text`	Verilen metin içinde secret tarar
`scan_file`	Tek bir dosyayı tarar
`scan_directory`	Bir dizini ve alt dizinlerini yinelemeli olarak tarar
`list_patterns`	Tüm aktif secret desenlerini listeler

Örnek Kullanım

Claude'a şunu sorabilirsiniz:

"Projemdeki gizli bilgileri tara: /Users/me/my-app"

"Bu .env dosyasında secret var mı?"

"Şu metin güvenli mi: export API_KEY=sk-abc123..."

Tespit Edilen Secret Türleri

Kategori	Örnekler
Cloud	AWS Access Key, AWS Secret, GCP API Key
Source Control	GitHub PAT, GitLab Token
Ödeme	Stripe Secret/Publishable Key
AI	OpenAI API Key, Anthropic API Key, HuggingFace Token
İletişim	Slack Bot Token, Twilio Auth Token, SendGrid Key
Veritabanı	PostgreSQL URL, MySQL URL, MongoDB URI, Redis URL
Kriptografi	RSA Private Key, EC Private Key, OpenSSH Key, PGP Key
Web	JWT Token, Bearer Token
Paket / Platform	npm Token, Docker Hub Token, Vercel Token
Genel	`SECRET=`, `PASSWORD=`, `API_KEY=` kalıpları

Güvenlik Notu

Bu araç tarama sonuçlarında eşleşen değerleri kısmen redakte eder (sk_live_abc1...xyz9 gibi). Tam değerler asla log'a yazılmaz veya dışarı aktarılmaz.

CLI — CI/CD Entegrasyonu

MCP server moduna ek olarak doğrudan CLI olarak da kullanılabilir:

# Proje dizinini tara
npx @guardbee/mcp-secret-scanner scan ./my-project

# Tek dosya tara
npx @guardbee/mcp-secret-scanner scan .env

# Sadece critical/high'da başarısız ol
npx @guardbee/mcp-secret-scanner scan . --fail-on=high

# JSON çıktı (CI raporlama için)
npx @guardbee/mcp-secret-scanner scan . --format=json

Exit kodları: 0 = secret bulunamadı · 1 = secret bulundu · 2 = hata

GitHub Actions

name: Secret Scan
on: [push, pull_request]

jobs:
  secret-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Scan for exposed secrets
        run: npx @guardbee/mcp-secret-scanner scan . --fail-on=high

GitLab CI

secret-scan:
  image: node:20
  script:
    - npx @guardbee/mcp-secret-scanner scan . --fail-on=high
  only:
    - merge_requests
    - main

Pre-commit Hook

# .git/hooks/pre-commit
npx @guardbee/mcp-secret-scanner scan . --fail-on=critical || exit 1

Geliştirme

npm install
npm test          # 16 unit test
npm run build     # TypeScript derleme

Lisans

MIT — GuardBee

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityMaintained

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

secret-scanner A
tools.knurl
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Security Penetration Testing
12
Opzyai Pro
com.opzyai
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Code Analysis Penetration Testing Security
2
SBOMApp - SBOM Generator & Vulnerability Scanner
io.github.mcpsbom
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
Developer Tools Security Testing & QA Tools
2
LaunchTrust A
co.launchtrust
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Security Penetration Testing
92

Related MCP Servers

credential-free
Security Developer Tools Code Analysis
skutry
A
license
Not graded
quality
C
maintenance
Scans code for exposed secrets, API keys, tokens, and credentials across 69 patterns covering cloud services, AI platforms, payment providers, authentication services, and databases.
Updated 9 months ago (2025-12-01 11:44 UTC)
MIT
netallion-mcp-lite
netallion
A
license
Not graded
quality
A
maintenance
Scans text and files for common secrets (AWS, GitHub, etc.) and redacts them to prevent credential leakage in AI-assisted development. Runs entirely locally with no telemetry.
Updated 2 months ago (2026-07-19 23:19 UTC)
MIT
Security & GRC MCP Server
Security Code Analysis Legal & Compliance
ninoajn
F
license
Not graded
quality
C
maintenance
Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.
Updated a month ago (2026-07-26 13:18 UTC)
-
env-secret-exposure-analyzer
Security Code Analysis Developer Tools
vola-trebla
A
license
A
quality
D
maintenance
Scans projects for hardcoded secrets, unprotected .env files, and console.log leaks to prevent credential exposure.
Updated 4 months ago (2026-05-20 16:54 UTC)
5
27
MIT