{"name":"io.github.vola-trebla/env-secret-exposure-analyzer-mcp","slug":"vola-trebla-env-secret-exposure-analyzer-mcp","title":null,"description":"Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.","url":"https://mcp.market/server/vola-trebla-env-secret-exposure-analyzer-mcp","rating":null,"grade":"B","score":82,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":6,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-05-20T16:54:21.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/vola-trebla/env-secret-exposure-analyzer-mcp","website":null,"version":"0.2.0","remotes":[],"packages":[{"registryType":"npm","identifier":"env-secret-exposure-analyzer-mcp","version":"0.2.0","transport":{"type":"stdio"}}],"tools":[{"name":"check_gitignore_coverage","description":"Check whether sensitive files (.env, .env.local, secrets.json, etc.) are properly covered by .gitignore rules. Flags files that contain secrets but could be accidentally committed.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_ci_workflows","description":"Scans GitHub Actions (.github/workflows/*.yml), CircleCI (.circleci/config.yml), and GitLab CI (.gitlab-ci.yml) workflow files for dangerous secret interpolation patterns. Detects …} and …} used directly in run: steps (log_leak risk — GitHub Actions logs the expanded plaintext) and …} / issue / commit content interpolated in shell commands (injection risk — attacker-controlled input). Returns file","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_for_log_leaks","description":"Scan source files for console.log / logger calls that may print environment variables or secrets at runtime. Catches patterns like console.log(process.env.SECRET) or logger.info({ apiKey }) before they reach production logs.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_for_secrets","description":"Scan a project directory for hardcoded secrets, API keys, tokens, and passwords. Detects patterns like AWS keys, GitHub tokens, Stripe keys, private keys, and generic high-entropy strings. Returns file path, line number, severity, and a masked preview.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_git_history","description":"Scan the git commit history of a repository for secrets that were ever committed, even if later deleted. Detects hardcoded API keys, tokens, passwords, and other credentials added in diff hunks across recent commits. Returns each finding with its commit hash, file, line, severity, a masked preview, entropy score, whether the secret is still present in the working tree, and whether rotation is requ","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":82,"grade":"B","scanned_at":"2026-09-27T17:08:37.709Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T17:08:37.760Z","components":{"code":{"score":25,"max":25,"notes":["11 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 130 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"env-secret-exposure-analyzer-mcp","version":"0.2.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-05-20T04:25:12.204Z","repositoryUrl":"git+https://github.com/vola-trebla/env-secret-exposure-analyzer-mcp.git"}],"repo":{"found":true,"owner":"vola-trebla","repo":"env-secret-exposure-analyzer-mcp","archived":false,"pushedAt":"2026-05-20T16:54:21Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/14157914?v=4","ownerCreatedAt":"2015-09-07T06:57:28Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/14157914?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-05-20T16:54:21.000Z","score":6}}}},"grade_history":[],"reviews":[]}