".ENV" matching MCP servers:

An MCP server that enables AI agents to securely add secrets to .env files by prompting the user to input the value through a local masked dialog, ensuring the agent never sees the secret.

Scans projects for hardcoded secrets, unprotected .env files, and console.log leaks to prevent credential exposure.

Share encrypted, self-destructing secrets from your AI agent. Zero-knowledge E2E encryption. Agent-blind input sources (env:, file:, dotenv:) keep secrets out of LLM context.

An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.

MCP server that exposes Bitwarden's Public API for organization member and vault group management, enabling inviting members and assigning them to vault groups. Supports stateless, multi-tenant authentication via gateway mode or env-based credentials.

Enables AI agents to securely manage OneGuard secrets through natural language, including syncing .env files, rotating database passwords, generating and managing vaults and secrets, and auditing team access, without exposing secret values to the model.

MCP server for managing a Marzban proxy/VPN panel — full user, subscription, node, host, and config lifecycle through 21 tools and 3 investigation prompts. Enforces env-only credentials, profile-gated tool visibility (readonly/standard/full), and a confirmation-token gate on every destructive call.

Enables AI assistants to audit and clean development workspaces safely by detecting reclaimable artifacts, exposed .env files, and potential secret leaks.

Encrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.

Enables AI agents to run Shipcheck on local JavaScript/TypeScript repositories, scanning for launch risks like exposed env vars, unsigned webhooks, and missing security guardrails.

Secure environment variable and configuration management MCP server with Claude Code integration for storing, managing, and retrieving environment variables.

Context-aware secret scanner that lets an AI agent scan code, verify which leaked keys are actually live by calling the provider, and rewrite them to env-var lookups before committing. Exposes scan/verify/rewrite tools plus secret-type and verifier resources over MCP.

Enables secure delivery of Bitwarden Secrets Manager secrets to approved local files without exposing secret values to the MCP client or model. It provides metadata-only secret discovery and atomic file writes for single secrets or raw env files.

A deterministic identity and authorization layer for MCP servers that verifies agent identity and scope using OAuth 2.0, WIMSE workload identity, and HTTP Message Signatures, resolving or refusing without guessing.

Local-first security check for AI coding agents — finds hardcoded secrets, exposed .env files, git-history leaks and vulnerable dependencies (OSV), entirely on your machine. Ask your agent "is this safe to ship?" and get a Launch Readiness score with a fix for every finding.

A secure wrapper that launches other MCP servers, replacing environment secrets with placeholders and eliciting them via an encrypted browser form, never exposing secrets to the model or client.

Read-only MCP server that scans Docker Compose, Cloudflare Tunnel, and .env files for security risks in self-hosted homelabs.

Enables chatting with PostgreSQL databases through natural language, with GitHub OAuth authentication and role-based access control.

Grants an agent a bounded view of the filesystem where each directory is declared explicitly with a role (reference, sourcecode, workspace) that caps operations to read, write, or delete, resolving every path through a single confinement and permission checkpoint. Common secrets such as .env, keys, and .git are filtered from both access and listings, and deletions only move files into a per-root trash instead of erasing them.

Enables secure API key management for development projects by storing keys in OS keychains, auto-generating .env files and SDK client code, and providing AI-assisted key management through Claude Code integration.