Loading the registry…
MCP server that scans code for hardcoded secrets (AWS/Stripe/GitHub/Google/Slack/OpenAI/Anthropic/npm/SendGrid/Twilio/Azure keys, DB connection-string passwords, private keys, JWTs, generic high-entropy credentials) before an AI coding agent writes or commits it.
We found this by crawling public sources and nobody has attested to it. That is how most of the registry gets here, and it is not a mark against the artifact — it only means no authenticated act of publication is on record. An artifact can be the vendor's own and still appear here.
Choose your runtime: the CLI writes the mcpServers config entry for that target.
nerlo install --target claude-code -- secretguard-mcp
Install respects the composite badge: Clean proceeds, Caution prompts for confirmation, and Flagged is refused. Write operations require an API token.
Not yet scanned
This server is in the registry but has no completed scan yet. Per-scanner scoresheets appear here once the pipeline finishes its first run.