Connection String Secret Audit MCP server

by jmshinhwa·io.github.jmshinhwa/connection-string-secret-audit·v0.1.4

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr

A89/100grade A

What users say

No reviews yet

Safety scan

A89/100

Adoption

Growing

0 stars141 downloads/wk

Reviews

Nobody has reviewed Connection String Secret Audit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings

Code scan5 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Release history: 2 versions in the registry since 2026-09-18, latest 2026-09-23, typically one every 5 days.

Runs npx -y @readystack/connection-string-secret-audit on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add connection-string-secret-audit -- npx -y @readystack/connection-string-secret-audit

From the Connection String Secret Audit repository's README, as published. We do not edit it. Read it on GitHub

VS Code themes by ReadyStack

Nothing above is checked by us. What we check is on the safety report.

Is Connection String Secret Audit MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the Connection String Secret Audit safety report
How do I install Connection String Secret Audit?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Connection String Secret Audit need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Connection String Secret Audit maintained?: The last commit was 32 days ago (2026-10-03). The latest release is v0.1.4.
What can I use instead of Connection String Secret Audit?: Servers from other publishers that do the same job: Guardvibe MCP server, Secret Scanner MCP server and Secret Scanner MCP server. Compare all Connection String Secret Audit alternatives.
How does Connection String Secret Audit compare with other Security MCP servers?: safety score 89/100 (higher than 87% of 915 Security servers); downloads a week 141 (more than 69% of 248 Security servers with a package). Full comparison.

Same job from other publishers: the closest match first, then the best rated.

Guardvibe
Deterministic security layer your AI can't be. 644 rules, 39 tools, CLI + doctor + host audit.
not reviewed
Growing
C
Secret Scanner
Scans files for leaked secrets and API keys
More from 4hmetuyar →
not reviewed
Growing
A
Secret Scanner
Scans files for leaked secrets and API keys
More from GuardBee →
not reviewed
Growing
A
Debezium
Debezium / Kafka Connect CDC connector management for AI agents — governed, secret-safe.
not reviewed
Growing
A
grim-mcp
Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.
not reviewed
Growing
C