Secret Handoff MCP server

by geland·io.github.geland/secrethandoff·v0.0.2

Let agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.

A88/100grade A

What users say

No reviews yet

Safety scan

A88/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Secret Handoff yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 3 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

The registry entry has no remote endpoint or installable package.

Is Secret Handoff MCP server safe?: Yes, by our scan: it is graded A (88/100). Read the Secret Handoff safety report
Does Secret Handoff need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Secret Handoff maintained?: The last commit was 13 days ago (2026-10-22). The latest release is v0.0.2.
What can I use instead of Secret Handoff?: Servers from other publishers that do the same job: Phantom Secrets MCP server, Skylos MCP server and chunk-invariance MCP server.

Same job from other publishers: the closest match first, then the best rated.

Phantom Secrets
Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
not reviewed
Growing
C
Skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
not reviewed
Established
C
chunk-invariance
Checks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
not reviewed
Growing
A
SafeWeave
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
not reviewed
Growing
C
Zn Gate
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
not reviewed
Growing
B