"Secret scanning and credential detection tools" matching MCP servers:

Enables scanning staged diffs, files, and raw text for secrets before they are committed, fully offline with masked findings and severity-based gating.

Scans files, directories, and environment configurations for exposed secrets, API keys, and credentials, redacting matches and providing allowlist support. Enables natural-language secret detection in projects and CI/CD integration via CLI.

Post-quantum readiness for AI coding agents: scans code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and returns NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, with fix verification and dependency checks. Content-based, advisory tools only; runs local (npx @quantakrypto/mcp) or as a hosted OAuth endpoint.

Enables coding agents to run Playwright e2e tests, validate Supabase RLS policies with role-based SQL, typecheck TypeScript, execute npm scripts with parsed test output, and validate Next.js builds, all through a structured MCP interface.

Enables Claude to create, manage, and clean up git worktrees automatically, including dependency installation and GitHub PR creation.

repo-release-tools mcp-server automates the software release process by managing version bumps, changelog generation, and releases. It streamlines repository maintenance by handling repetitive release tasks directly through your AI assistant.

Monitor failing GitHub Actions workflows, auto-fix them with OpenCode, and retry the run — driven by a workflow_run webhook, coordinated through an MCP server.

An MCP server that complements Epic's official Unreal Engine MCP server with 78 additional tools across 14 subsystems for build/cook/package, cinematics, Niagara, automation testing, source control, profiling, World Partition, and project maintenance, using Unreal's built-in Python and Remote Control plugins.

Enables AI agents to interact with 1C: Enterprise development environment, including running tests, managing launch profiles, building configurations, and performing database operations through the 1C: Platform Tools extension.

Provides live Maven Central dependency inspection with stability filtering, version comparison, CVE checks, and POM-aware upgrade recommendations for MCP-capable clients.

A Multi-Claude Program for interacting with GitHub APIs through Claude Desktop, allowing users to search repositories, manage issues, pull requests, repository settings, workflows, and collaborators.

Governed CI/CD operations for self-hosted GitLab and Gitea — pipeline-failure, runner, artifact-bloat, and stale-branch RCA, with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

Arch is the personified Agent Platform MCP operator for Build, Evaluate, Optimize, Debug, and Analyze workflows, enabling interaction with Kore.ai Agent Platform.

A production-ready template for building Model Context Protocol (MCP) servers in Python, using Docker Compose for containerized development and CI/CD.

Enables scanning paths and pasted snippets for credential leaks, building and diffing baselines, listing rules, assessing entropy, producing SARIF, and running a demo through MCP tools.

Enables assessing database change risk, estimating impact, generating rollback plans, prechecking change windows, and orchestrating dry-run, canary, apply, and rollback with approval gates and auditable state transitions.

Enables AI assistants to interact with Azure DevOps APIs for managing projects, work items, repositories, pull requests, pipelines, and more through natural language.

Integrates with Siemens Polarion ALM to manage test cases, test runs, and results, with support for JUnit import and spreadsheet export.

Generate professional changelogs from git history and suggest semver bumps, with optional AI enhancement via Claude.

Enables static, database-free SQL health checks that return rule-based findings and verdicts, propose executable fixes, and verify rewrites are equivalent while comparing execution plans and suggesting indexes. Supports batch/file/git-diff review for CI gating, all at zero-dependency Tier0.

Provides AI agents with 25 security analysis tools including vulnerability scanning, package hallucination detection, prompt injection firewall, and CI/CD integration.

Provides secure, controlled access to GitHub operations through the Model Context Protocol with enterprise-grade security features including secret detection, vulnerability scanning, rate limiting, and full audit trails. Supports repository management, file operations, branch creation, commits, and GitHub Actions workflows.

Enables interaction with multiple Jenkins instances from a single MCP server, using header-based authentication for multi-tenancy.

Enables users to interact with Prow CI/CD systems, retrieving build logs and diagnosing PR build issues through natural language.

Enables AI assistants to monitor GitHub repository health by calculating health scores, fetching repository metadata, analyzing Dependabot alerts, checking CI/CD status, and retrieving code scanning alerts.

Enables scanning Python repos for dead code and automatically drafting a branch + PR for the safe subset (unused single-name imports) after running the repo's full test suite. All other findings are reported without modification, and a human always merges.

MCP server for Argo CD and Vault that allows authenticated users to run CLI commands via GitLab SSO, with confirmation for dangerous operations and secret redaction from model context.

MCP server that triggers Jenkins automation jobs and returns their results, with an action registry, parameter validation, and credential redaction.

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

Enables agents and CI pipelines to audit MCP servers and agent tool-chains by statically scanning repositories, local checkouts, tools/list exports, or live endpoints for risks such as destructive actions without confirmation, mismatched safety annotations, injection surfaces, credential or PII exposure, and unguarded command, path, or URL sinks. All checks are read-only and never execute the scanned code or call tools/call.