Env Secret Exposure Analyzer Mcp

vola-trebla/env-secret-exposure-analyzer-mcp

Runs three filesystem scans to catch secrets before your AI agent sees them: hardcoded credentials across 20+ patterns (AWS keys, Stripe tokens, database URLs, JWTs), console.log statements that dump environment variables or config objects at runtime, and sensitive files missing from .gitignore. Returns masked previews with severity ratings and line numbers, never the actual values. Built for the specific risk of helpful agents accidentally ingesting credentials during debugging sessions or config reviews. Works entirely locally via stdio, no secrets leave your machine. Pairs well with CI readiness and code analysis servers if you're building pre-commit or pre-release guardrails into agent workflows.

tools

3

transport

STDIO

last updated

May 20, 2026

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

console.log('Config loaded:', JSON.stringify(config));
console.log(process.env.DATABASE_PASSWORD);