Secret Hygiene
Count secret-like patterns in bounded local files without returning values, keys, paths,...
Runs on your machine from its package; the steps are below.
What it does
- Reads
- Writes
- High impact
At most: only reads or looks up information.
What it costs
FreeOdel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y secret-hygiene-mcp
MCP client config
{
"mcpServers": {
"secret-hygiene": {
"command": "npx",
"args": [
"-y",
"secret-hygiene-mcp"
]
}
}
}secret-hygiene-mcp
Secret Hygiene scans bounded local files for common secret-like patterns and returns category counts only. It is designed as a pre-commit review signal, not a credential detector with perfect coverage.
Quick start
npm install
npm test
npm start
Use scan_secret_hygiene inside SECRET_HYGIENE_ROOT.
Privacy and limits
Values, keys, matches, filenames, paths, and source text are never returned. Pattern matching is conservative and can produce false positives or miss unusual formats. Rotate exposed credentials separately.
