- Conduid
- Marketplace
- #secrets
MCP servers tagged secrets
64 live MCP servers tagged "secrets", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with secrets.
GitGuardian
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
Dotenv
Loads environment variables from .env for nodejs projects.
Ship Safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
Treg
OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
Cycode CLI
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
Beam
Ephemeral text transport for humans and AI agents. Read once. Gone forever.
Secretless AI
One command to keep secrets out of AI. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.
VibeDoctor
A health check for AI-written code. Finds leaked secrets, broken APIs, privacy risks and code-health issues in JavaScript, TypeScript, Python and mixed repositories.
Argus Codescan MCP
Argus — open-source security scanner (SAST, secrets, malware heuristics, SARIF, MCP). YAML rules welcome — good first issues.
GitGuardian
leading API, which features over 500 secret detectors to prevent credential leaks before they reach public repositories. Resolve security incidents directly with rich contextual d…
Dorky
DevOps Records Keeper
Concealer
🔐 The local-only secret manager for the AI-coding era with MCP, CLI, Web UI, TUI and Extension. No cloud, No telemetry, No account.
Sstart
🤫 sstart: Secure Start for Cloud-Native Secrets
Quell
Stop API keys and passwords leaking into AI tools. Offline secret detection and redaction for VSCode, Cursor, Windsurf, and Claude Code.
Aiignore CLI
One command to protect your secrets from all AI coding tools
Server
MCP server for Doppler API with auto-generated tools from OpenAPI specification
Grim
Security audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise gaps across any stack, with drift detection and SBOM.
Envpkt
Credential lifecycle and fleet management for AI agents
Demipass
Secrets management for LLM sessions. Keep credentials out of context windows.
Server Vault
Bitwarden/Vaultwarden MCP server — BYOK vault access with 6 tools, Send-based reveal, TOTP, and safe agent-write
Synapse
Shared local memory and skills for Claude Code, Codex, pi, and Ainz. macOS desktop app; Linux terminal dashboard, CLI, and MCP server.
Kern
The agent wallet. Hold credentials — agents use them without seeing them.
N8n Nodes Enigmagent
n8n community node — resolve EnigmAgent vault secrets in workflows. {{PLACEHOLDER}} -> real value at HTTP boundary.
Nfi Tools
CLI tool and MCP server for handling sensitive information without exposing values to AI assistants
Kern
The agent wallet. Hold credentials — agents use them without seeing them.
Vibecheck
Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI coding agents make (secrets, unprotected routes, eval-RCE, SQLi, CORS, JWT, leaked keys).…
Strongroom
Own your agent secrets — your agent holds a scoped, single-use lease, never the raw API key. strongroom injects the real secret only at egress, so a leaked prompt or poisoned tool…
Secret Scan
MCP server and CLI that scan staged diffs, files, and text for secrets before they reach a commit - offline, with masked findings.
Vaultbridge
Secret management for AI coding agents. Your secrets never enter the LLM context window.
Andbo
Secure sandbox for AI coding agents — run an agent (or let your harness drive it) in an isolated, policy-controlled container with enforced network egress, secret redaction, and a…
Secret Capture Skill
Claude Code skill: capture a secret via hidden-input dialog and route it to 1Password, macOS Keychain, GitHub secrets, Cloudflare Workers, Coolify, n8n, or a .env file without the…
Skill Credentials Management
Credentials vault skill — scoped secret access, rotation, revocation, and audit
Burndrop
One-time, end-to-end encrypted secret exchange between humans and AI agents through a zero-knowledge relay
Residoo
Find secrets your AI coding agent leaked to disk, watch for new ones, and optionally block a sensitive read before it happens. Free, MIT, zero deps, no network calls by default. O…
Secret Scan
MCP server and CLI that scan staged diffs, files, and text for secrets before they reach a commit - offline, with masked findings.
Claude Secrets
GPG-encrypted credential manager for Claude Code MCP channels. Keeps API tokens out of .env files that Claude can read.
Zorath Env
AI-native .env validation in any language. Single-binary Rust CLI: typed schema validation, 22-pattern secret detection, SHA-pinned remote schemas, and a built-in stdio MCP server…
Pledgeguard
Rust-native secret scanner with MCP server, AST refinement, and WASM plugins
Secure API MCP
MCP server that lets Claude Code use secrets without seeing them.
Agentic Vault
Open-source MCP server that lets AI agents call APIs without ever seeing the credentials. Policy-enforced secret injection into HTTP calls and subprocesses, with encrypted audit t…
Lobstervault
MCP server for LobsterVault — encrypted secret storage for AI agents
Deaddrop MCP
MCP server: AI agents share self-destructing one-time secrets via DeadDrop - zero-knowledge, paid per call in USDC over x402 on Base
Leakrank Guard
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents. MCP server, docs for the leakrank-guard npm package.
Merkle
Local-first MCP vault for Claude Code — LLMs hold opaque handles, operators approve every reveal, every access leaves a BLAKE3 hash. Rust 2024 / DDD + Hexagonal.
Git Org Group Cred Vault
MCP server (Model Context Protocol) that stores GitHub and GitLab tokens in an encrypted vault and retrieves them by org/group keyword, with per-project scoping. Self-hosted crede…
Wardrail
Local security scanner for vibe-coded apps: stop API key leaks, Git-history secrets, and unsafe MCP or AI agent instructions before commit.
Env Diff
Compare .env files across environments, branches, and runtimes. Type-aware diffing, secret masking, git branch comparison, MCP server for AI agents. Zero dependencies.
Secret Bridge MCP
Native local MCP secret entry for AI clients — built by Abomination81
Rotate Env
Bulk-rotate a leaked API-key env var across every .env and .mcp.json, safely. Dry-run by default, never prints the secret; agent- and CI-safe.
Envvault
EnvVault — 自部署密钥管理中心，AES-256加密存储，一键导出 .bashrc / .env