README.md
Enterprise-grade MCP server for detecting secrets in GitHub repositories.
Enterprise-grade MCP (Model Context Protocol) server for detecting secrets and sensitive information in GitHub repositories. Scans for 35+ types of secrets including API keys, passwords, tokens, and credentials with production-ready reliability features.
Tools (1)
scan_repositoryScans a GitHub repository for secrets and sensitive information.Environment Variables
GITHUB_PERSONAL_ACCESS_TOKENrequiredToken used to authenticate with GitHub API for repository scanningConfiguration
claude_desktop_config.json
{"mcpServers":{"leak-secure":{"command":"npx","args":["-y","@cbuntingde/leak-secure-mcp"],"env":{"GITHUB_PERSONAL_ACCESS_TOKEN":"your_token_here"}}}}Try it
→Scan the repository 'facebook/react' for any leaked API keys or secrets.
→Check my GitHub repo 'my-org/private-app' for sensitive credentials.
→Run a security audit on the 'cbuntingde/leak-secure-mcp' repository to ensure no tokens are exposed.