Scans files for leaked secrets and API keys
27 servers across security & testing, authentication & identity and databases. The largest is Secret Scanner.
Security & Testing · Authentication & Identity · Databases
27 MCP servers, most downloaded first. 27 of 27 are free to start.
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
Catches leaked credentials and PII in outbound LLM prompts
Scans RAG content/scraped pages for indirect prompt injection
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
TLS certificate/cipher/protocol inspection
CVE scanning for npm/pip/cargo dependencies via OSV
DNS record enumeration, misconfiguration and dangling-subdomain detection
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
The rest either hold an API key issued by the publisher or ask for nothing.
Listed without a verification tick. Read the listing before installing.