Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.
Runs locally over stdio
This server isn't hosted β your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y env-secret-exposure-analyzer-mcp
MCP client config
{
"mcpServers": {
"env-secret-exposure-analyzer-mcp": {
"command": "npx",
"args": [
"-y",
"env-secret-exposure-analyzer-mcp"
]
}
}
}