Block future access to a compromised or outdated secret by revoking it. Use after a credential leak or secret rotation.
MIT
260,522 tools. Last updated 2026-07-05 07:02
"Secret scanning and credential detection tools" matching MCP tools:
- List stored credential services to view non-secret fields and expiry status. Does not access OS keychain, safe for discovery.MIT
- Check expiring or overdue secrets in control-plane to manage credential rotation and governance without exposing secret values.Apache 2.0
- Enforce zero-tolerance security policy by evaluating SAST, secret detection, injection surfaces, auth boundaries, and TLS config. Any CRITICAL finding or exposed secret results in a VIOLATION verdict.MIT
- Export cached anon/service keys for a project when a credential-required operation needs them. Requires reveal set to true to emit secret material.MIT
- Export local cached anon/service keys for a project by providing project ID and setting reveal to true. Use when credential-required operations need secret keys.MIT
Matching MCP Servers
- AlicenseAqualityBmaintenanceEnables scanning diffs or code blobs for leaked secrets, returning a verdict with severity and masked findings, all processed locally with no data sent externally.Last updated1MIT
- AlicenseAqualityAmaintenanceMachine-readable detection lookups for SIEM enrichment and AI agents. Query 800+ LOLBAS and GTFOBins binaries plus process parent-child baselines — get risk levels, abuse categories, and MITRE ATT\&CK mappings without embedding data in prompts.Last updated6Apache 2.0
Matching MCP Connectors
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
20 free dev tools: JSON/YAML, XML/SQL, Cron, SEO, QR code, URL shortener, cron tasks, files
- Verify if your GitHub organization has configured custom secret scanning patterns to detect security gaps (SEC-004).MIT
- Paste text into a terminal session with safeguards for large pastes and secret detection. Confirm large pastes over 2000 characters.MIT
- Detect whether secret scanning and push protection are enabled in a repository, identifying missing security controls.MIT
- Scan AKS clusters for GitOps vulnerabilities including source repository exposure, kustomization injection, Helm release manipulation, secret leakage, and Git credential exposure.MIT
- Check secret scanning coverage and review open alerts for SEC-001 and SEC-002 in a repository.MIT
- Checks for secret scanning alerts where push protection was bypassed, identifying SEC-003 vulnerabilities.MIT
- Retrieve and display GitHub Advanced Security secret scanning alerts for a specified repository to identify and manage potential security risks.MIT
- Retrieve a specific secret scanning alert from a GitHub repository, including secret type and location, with an option to hide the literal secret.
- Retrieve secret scanning scan history for a repository to review past secret detection events.
- List secret scanning alerts in a repository to detect exposed secrets. Supports filtering by state, type, assignee, and resolution for efficient security monitoring.
- Retrieve all locations associated with a specific secret scanning alert in a GitHub repository to pinpoint where secrets are exposed.
- Update a secret scanning alert in a GitHub repository by providing owner, repo, and alert number, with an optional request body for modifications.
- Check required secret names and their configured or missing status for a template/module composition before deployment planning. Does not expose secret values.MIT