Run a comprehensive security audit combining dependency scanning, secret detection, and pattern checks. Automatically collects evidence, creates governance tasks, and sends notifications for critical findings.
MIT
510,481 tools. Updated 2026-09-04 01:55
"Secret scanning and credential detection tools" matching MCP tools:
- Block future access to a compromised or outdated secret by revoking it. Use after a credential leak or secret rotation.MIT
- Retrieve public metadata for a stored n8n credential by its stable ID, including identity, type, flags, and timestamps, without exposing secret values.MIT
- Clear the default SSH or GitHub credential profile without deleting the profile or any OS-managed secret. Resets the active credential to allow reconfiguration.MIT
- Enforce zero-tolerance security policy by evaluating SAST, secret detection, injection surfaces, auth boundaries, and TLS config. Any CRITICAL finding or exposed secret results in a VIOLATION verdict.MIT
- Retrieve the current TOTP code for a credential with a configured TOTP secret. Use for time-based one-time passcode logins without exposing the secret.MIT
Matching MCP Servers
- AlicenseAqualityCmaintenanceMachine-readable detection lookups for SIEM enrichment and AI agents. Query 800+ LOLBAS and GTFOBins binaries plus process parent-child baselines — get risk levels, abuse categories, and MITRE ATT\&CK mappings without embedding data in prompts.6Apache 2.0
- AlicenseAqualityBmaintenanceEnables scanning diffs or code blobs for leaked secrets, returning a verdict with severity and masked findings, all processed locally with no data sent externally.1MIT
Matching MCP Connectors
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Pay-per-call AI tools over x402: web research, summarization, structured extraction (USDC, Base).
- Summarize GitHub security alerts (code scanning, Dependabot, secret scanning) with severity breakdown and recommended fix order.MIT
- Consume a partner-approved single-use grant to generate an embedded-webmail credential. Returns the secret exactly once and notifies the operator.MIT
- Fetch credential metadata from Ansible Automation Platform by ID, with secret values replaced by encrypted placeholders for safety.Apache 2.0
- Commit a staged DB credential to the secret store and generate a db_profile, activating process list and top query tools for the instance. Requires user confirmation; password stays server-side.MIT
- Read file contents securely with symlink protection, binary detection, truncation limits, and automatic secret redaction.MIT
- Export a project's cached anon/service keys from the local credential cache. Use reveal:true to emit secret key material when a credential-required operation needs access.MIT
- Retrieve secret-scanning alerts for a repository to flag exposed credentials, filterable by state, resolution, and secret type.MIT
- Retrieve credential metadata by ID to verify configuration without exposing secret data.MIT
- Define the workspace root directory for scanning TODO comments, ensuring accurate detection when automatic setup fails.ISC
- Replace an existing credential's secret value permanently. The new secret is write-only and never returned, ensuring secure credential rotation.MIT
- Verify if your GitHub organization has configured custom secret scanning patterns to detect security gaps (SEC-004).MIT
- Retrieve metadata for a user's Forcepoint Vault credential, returning only non-secret fields to avoid exposing token values.MIT
- Deploy a user credential security artifact to SAP Cloud Integration, providing username and password. The secret is write-only and cannot be read back.MIT
- List secret scanning allowlist rules for a Bitbucket Server repository. Requires version 8.5 or later.Apache 2.0