n0s1-mcp
Scan Asana tasks for leaked secrets, including task details and attachments.
Scan Confluence pages for leaked secrets, including page content and attachments.
Scan GitHub repositories for leaked secrets, including code, issues, and pull requests.
Scan GitLab projects for leaked secrets, including code, issues, and merge requests.
Scan Jira tickets for leaked secrets using the n0s1 engine, including ticket contents and metadata.
Scan Linear issues for leaked secrets, including issue descriptions and comments.
Scan Slack channels for leaked secrets, including messages and files.
Scan Zendesk tickets for leaked secrets, including ticket comments and attachments.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@n0s1-mcpScan the GitHub org mycompany for exposed API keys"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
n0s1-mcp
An MCP server that exposes n0s1 secret-scanning capabilities as tools for AI assistants (Claude, Cursor, etc.).
Scan Jira, Confluence, Slack, GitHub, GitLab, Zendesk, Linear, Asana, Wrike, and local filesystems for leaked secrets — directly from your AI workflow.
Quickstart
No install required. Add this to your MCP client config and run via uvx:
{
"mcpServers": {
"n0s1": {
"command": "uvx",
"args": ["n0s1-mcp"]
}
}
}For Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json
For Claude Code: .claude/mcp.json in your project, or ~/.claude/mcp.json globally.
Related MCP server: MCPPentestBOT
Available Tools
Tool | Description | Required params |
| Scan Jira tickets |
|
| Scan Confluence pages |
|
| Scan Slack channels |
|
| Scan GitHub repositories |
|
| Scan GitLab projects |
|
| Scan Zendesk tickets |
|
| Scan Linear issues |
|
| Scan Asana tasks |
|
| Scan Wrike tasks |
|
| Scan local filesystem |
|
| Get status of a running/completed scan |
|
| Get paginated findings for a completed scan |
|
Environment Variables
Credentials can be passed as tool arguments or pre-set as environment variables:
Variable | Used by |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Example with env vars pre-configured:
{
"mcpServers": {
"n0s1": {
"command": "uvx",
"args": ["n0s1-mcp"],
"env": {
"GITHUB_TOKEN": "ghp_...",
"JIRA_TOKEN": "ATATT..."
}
}
}
}Usage Examples
Once connected, ask your AI assistant:
"Scan my Jira project SEC for leaked secrets"
"Check the GitHub org mycompany for exposed API keys"
"Scan the /home/user/project directory for secrets"
Publishing to PyPI
pip install hatch
hatch build
hatch publishLicense
GNU General Public License v3 — same as n0s1.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/spark1security/n0s1-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server