Ghosthunt
Scans your local development machine for leaked credentials in environment files, shell history, and config files across AWS, Docker, GitHub CLI, npm, SSH, and 35+ secret patterns. Exposes two tools: scan_secrets for a full report with file paths and line numbers, and scan_summary for a quick health score from 0 to 100. Everything runs locally with no network calls. You'd reach for this when you want Claude to audit your machine for API keys you've accidentally left in .env files, pasted into bash history, or stored in ~/.aws/credentials, then get specific remediation steps for each finding.
- tools
- 2
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- May 27, 2026
Tools
2 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_secretsFull detailed scan. Returns every finding with file paths, line numbers, severity ratings, and remediation steps.
Full detailed scan. Returns every finding with file paths, line numbers, severity ratings, and remediation steps.
No parameter schema in public metadata yet.
scan_summaryQuick health check. Returns your health score (0-100) and a count by severity. Run this first to see if you have a problem.
Quick health check. Returns your health score (0-100) and a count by severity. Run this first to see if you have a problem.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
YOUR_API_KEY*secretYour API key for the service
Readme
GhostHunt
Find every leaked secret on your machine.
GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check: .env files scattered across projects, shell history, AWS/SSH/Docker configs, and more.
Everything runs locally. No data leaves your machine.
What It Scans
- Environment files — recursively finds every
.env,.env.local,.env.production, etc. under your home directory - AWS credentials —
~/.aws/credentialsand session tokens - SSH keys — unprotected private keys in
~/.ssh/ - Docker config — registry auth tokens in
~/.docker/config.json - npm/PyPI tokens —
~/.npmrc,~/.pypircauth tokens - GitHub CLI — OAuth tokens in
~/.config/gh/hosts.yml - Shell history — API keys pasted into
bash,zsh, orfishcommands - Kubernetes —
~/.kube/configcredentials - Netrc —
~/.netrcpasswords - 35+ secret patterns — AWS, Stripe, GitHub, OpenAI, Anthropic, Google, Slack, Twilio, SendGrid, database connection strings, private keys, and more
Install
Claude Desktop
Details
- Repository
- github.com/78degrees/ghosthunt
- Category
- Developer Tools
- Package
ghosthunt- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
More from 78degrees
Related Developer Tools MCP servers
View all
searchcodecom.searchcode/mcpCode intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.0stars
Secrets Audit Mcpeltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.0stars
Avalanche AVAX MCPairpote/avalanche-mcp-vscodeSearch and retrieve Avalanche blockchain documentation for building on AVAX.0stars
QTM4Jdenis-platonov/qtm4j-mcp-serverMCP server for QMetry Test Management for Jira (QTM4J) Open API.0stars
MCP stdio ShellGuardstudiomeyer-io/mcp-stdio-shellguardDefense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.0stars
Zoekt Mcpradiovisual/zoekt-mcpFast indexed code search for AI agents, powered by Sourcegraph Zoekt.0stars