Secrets Audit MCP Server

by eltocieario.github.eltociear/secrets-audit-mcpv1.0.1

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

1Dockerstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Maintained52d ago

Install Secrets Audit MCP server

claude mcp add secrets-audit -- docker run -i --rm ghcr.io/eltociear/secrets-audit-mcp:1.0.1

{
  "mcpServers": {
    "secrets-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "secrets-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "secrets-audit": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "secrets-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Freshness

Maintained — last maintenance signal 52d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-08-19 · 52d ago · GitHub
Latest release
2026-05-14 · 5mo ago · GitHub · v1.0.0
Package published
no data · npm/PyPI
Registry entry updated
2026-06-07 · 4mo ago · official registry · v1.0.1

FAQ

›How do I install the Secrets Audit MCP server in Claude Code?

Run: claude mcp add secrets-audit -- docker run -i --rm ghcr.io/eltociear/secrets-audit-mcp:1.0.1. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Secrets Audit require an API key?

No required environment variables are declared in its published metadata.

›Can I use Secrets Audit as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Secrets Audit in the official MCP registry?

Yes, as io.github.eltociear/secrets-audit-mcp.