1. Conduid
  2. Files
  3. io.github.vola-trebla/env-secret-exposure-analyzer-mcp
MCP server · Files

io.github.vola-trebla/env-secret-exposure-analyzer-mcp

by · github.com/vola-trebla/env-secret-exposure-analyzer-mcp

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

Unclaimed files
InstallView source
37Low

Scored 5 months ago · breakdown

About io.github.vola-trebla/env-secret-exposure-analyzer-mcp

io.github.vola-trebla/env-secret-exposure-analyzer-mcp is an MCP server published by vola-trebla in the Files category: scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add io-github-vola-trebla-env-secret-exposure-analyzer-mcp -- npx -y env-secret-exposure-analyzer-mcp
npx
npx -y env-secret-exposure-analyzer-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

check_gitignore_coverageCheck whether sensitive files (.env, .env.local, secrets.json, etc.) are properly covered by .gitignore rules. Flags files that contain secrets but could be accidentally committed.

Parameters not published.

scan_ci_workflowsScans GitHub Actions (.github/workflows/*.yml), CircleCI (.circleci/config.yml), and GitLab CI (.gitlab-ci.yml) workflow files for dangerous secret interpolation patterns. Detects ${{ secrets.* }} and ${{ github.token }} used directly in run: steps (log_leak risk — GitHub Actions logs the expanded plaintext) and ${{ github.event.pull_request.* }} / issue / commit content interpolated in shell commands (injection risk — attacker-controlled input). Returns file, job, step, pattern_found, risk, and recommendation.

Parameters not published.

scan_for_log_leaksScan source files for console.log / logger calls that may print environment variables or secrets at runtime. Catches patterns like console.log(process.env.SECRET) or logger.info({ apiKey }) before they reach production logs.

Parameters not published.

scan_for_secretsScan a project directory for hardcoded secrets, API keys, tokens, and passwords. Detects patterns like AWS keys, GitHub tokens, Stripe keys, private keys, and generic high-entropy strings. Returns file path, line number, severity, and a masked preview.

Parameters not published.

scan_git_historyScan the git commit history of a repository for secrets that were ever committed, even if later deleted. Detects hardcoded API keys, tokens, passwords, and other credentials added in diff hunks across recent commits. Returns each finding with its commit hash, file, line, severity, a masked preview, entropy score, whether the secret is still present in the working tree, and whether rotation is required. Respects .gitleaksignore.

Parameters not published.

Ask AI

✦

Ask AI about io.github.vola-trebla/env-secret-exposure-analyzer-mcp

Powered by Claude · Grounded in docs

I know everything about io.github.vola-trebla/env-secret-exposure-analyzer-mcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About io.github.vola-trebla/env-secret-exposure-analyzer-mcp

How do I install io.github.vola-trebla/env-secret-exposure-analyzer-mcp?

Run claude mcp add io-github-vola-trebla-env-secret-exposure-analyzer-mcp -- npx -y env-secret-exposure-analyzer-mcp, then add the server to your MCP client's configuration.

Is io.github.vola-trebla/env-secret-exposure-analyzer-mcp safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.vola-trebla/env-secret-exposure-analyzer-mcp still maintained?

Yes — the last commit was 5 months ago. The repository has 0 stars and 0 forks.