MCP.Market

Secret Sentinel MCP server

by AleBrito124356·io.github.AleBrito124356/mcp-secret-sentinel·v0.3.0·3 stars
No reviews yet

Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

3 stars73 downloads/wk

Reviews

Write one

Nobody has reviewed Secret Sentinel yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Secret Sentinel tools (9)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • list_patterns

    List the active secret detectors and allowlist rules.

  • redact_text

    Return the text with every detected secret replaced by [REDACTED:<detector>].

  • scan_agent_configs

    Audit AI agent and MCP client configuration files for hardcoded secrets.

  • scan_directory

    Recursively scan a directory tree for exposed secrets.

  • scan_file

    Scan a single file for exposed secrets.

  • scan_git_history

    Scan the lines added by the most recent commits (git log -p).

  • scan_git_range

    Scan the commits in base..head: by default, what `git push` would send.

  • scan_git_staged

    Scan ONLY the lines currently staged for commit (git diff --cached).

  • scan_text

    Scan a snippet of text or code for exposed secrets.

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan17 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Secret Sentinel compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 1,119 Developer tools servers
Tools
9
the typical Developer tools server has 7
Tools that change things
0%
typical: 5%. Fewer write tools means less an agent can break
GitHub stars
3
more than 75% of 855 Developer tools servers
Downloads a week
73
more than 49% of 436 Developer tools servers with a package

What its tools let an agent do: 9 read

Install Secret Sentinel in Claude Code, Cursor or VS Code

claude mcp add mcp-secret-sentinel -- uvx mcp-secret-sentinel
Add to Cursor

What the publisher says

From the Secret Sentinel repository's README, as published. We do not edit it. Read it on GitHub

mcp-secret-sentinel

<!-- mcp-name: io.github.AleBrito124356/mcp-secret-sentinel -->

Local secret guardrails for AI coding agents. An MCP server, a CLI and agent hooks that catch API keys, tokens, private keys and passwords in code, commits, prompts, tool calls and MCP configs, before they leave the machine. 64 detectors, base64-aware, every finding redacted. No account, no network calls.

Secrets rarely leak through hackers; they leak through commits, and now through agents. GitGuardian's State of Secrets Sprawl 2026 counted 28.65 million new secrets on public GitHub in 2025 (+34%), AI-service keys up 81%, 24,008 unique secrets in MCP configuration files, and a higher leak rate in commits co-written with AI coding assistants. A key pasted into .mcp.json, echoed by cat .env into a transcript, or written into a config by an agent in a hurry is compromised from that moment, even if the next commit deletes it.

Secret Sentinel puts a checkpoint at each of those moments:

The full secret value never appears in any output, so it never enters the conversation transcript either.

Install

Claude Code plugin (skill + agent hooks + MCP server in one step):

/plugin marketplace add AleBrito124356/mcp-secret-sentinel
/plugin install secret-sentinel@secret-sentinel

The hooks run straight from the plugin checkout with any Python 3.10+ (they use only the standard library). The MCP server starts with uv.

MCP server only (any MCP client):

claude mcp add secret-sentinel -- uvx mcp-secret-sentinel
{
  "mcpServers": {
    "secret-sentinel": { "command": "uvx", "args": ["mcp-secret-sentinel"] }
  }
}

CLI (git hooks, CI, scripts): pipx install mcp-secret-sentinel or pip install mcp-secret-sentinel. To run the latest code from GitHub instead of PyPI, use uvx --from git+https://github.com/AleBrito124356/mcp-secret-sentinel mcp-secret-sentinel.

Agent skill only (Agensi, skills.sh, any agent that reads SKILL.md): the skill lives in skills/secret-sentinel. It tells the agent when to scan, how to fix a finding and how to rotate a leaked credential, and uses the MCP tools or the CLI when they are available.

Agent hooks

mcp-secret-sentinel hook reads one hook event as JSON on stdin and prints the agent's decision. The plugin wires it up for you; without the plugin:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Secret Sentinel: common questions

Is Secret Sentinel MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Secret Sentinel safety report
How do I install Secret Sentinel?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Secret Sentinel need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Secret Sentinel maintained?
The last commit was 16 days ago (2026-10-19). The latest release is v0.3.0.
What can I use instead of Secret Sentinel?
Servers from other publishers that do the same job: Ekbasis MCP server, RepoPilot MCP server and Suvadu MCP server. Compare all Secret Sentinel alternatives.
How does Secret Sentinel compare with other Developer tools MCP servers?
safety score 92/100 (higher than 90% of 1,119 Developer tools servers); tools 9 (the typical Developer tools server has 7); tools that change things 0% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Secret Sentinel

Same job from other publishers: the closest match first, then the best rated.

All Secret Sentinel alternatives →
  • Ekbasis
    Foresee what git commands and multi-step changes will do, as calibrated probabilities
    B
  • RepoPilot
    Local, deterministic review of Git changes: weakened tests and CI gates, risky flows, blast radius.
    A
  • Suvadu
    Local shell history and AI agent sessions over MCP: search commands, failures, risk and git changes
    A
  • Emfirge
    Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.
    A
  • Agent Memory
    Git-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.
    A