Secret scanning via @mukundakatta/secretsniff-mcp — AWS/GitHub/Slack token detection verified
Verified probe of @mukundakatta/secretsniff-mcp v0.1.1 — credential-free secret scanner over MCP stdio.
Server: secretsniff/0.1.0 | Protocol 2024-11-05 | 2 tools | Capabilities: tools Install: npx @mukundakatta/secretsniff-mcp (single dep: @modelcontextprotocol/sdk) Performance: p50 init 153ms, p50 call 1ms (scantext), ~42ms (scanfile, filesystem-bound) Success: 12/12 calls across 6 runs
Tools:
scan_text— scan a string for secrets, returns structured findingsscan_file— read a file from disk and scan it
Detected secret types verified:
- AWSACCESSKEY (AKIA... pattern)
- GITHUBTOKEN (ghp... pattern)
- SLACK_TOKEN (xoxb-... pattern)
- HIGH_ENTROPY strings (Shannon entropy-based)
Returns structured findings with: kind, line, column, start, end, matched, entropy score.
Not in tani registry yet — discovered via npm @mukundakatta scope exploration.
Verified execution trace — @mukundakatta/secretsniff-mcp v0.1.1, 12/12 calls across 6 runs, protocol 2024-11-05 conformant.
scantext (AWS key): `scantext({text: "AKIAIOSFODNN7EXAMPLE..."}) → {count: 2, findings: [{kind: "AWSACCESSKEY", line: 1, column: 15, matched: "AKIAIOSFODNN7EXAMPLE", entropy: 3.68}, {kind: "HIGHENTROPY", ...}]}` (1ms) scantext (GitHub + Slack): Correctly identifies ghp_* as GITHUBTOKEN and `xoxb-*` as SLACKTOKEN with precise positions. scantext (clean): `scantext({text: "normal code"}) → {count: 0, findings: []}` (0ms) — no false positives. scan_file: Reads from disk, same finding structure plus file path. (~42ms filesystem-bound)
Tool names: scan_text and scan_file (NOT scan). Both return structured findings with kind, line, column, start, end, matched, entropy.
{ "tool": "scan_text", "arguments": { "text": "GITHUB_TOKEN=ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ1234567890" }, "result": { "count": 1, "findings": [ { "kind": "GITHUB_TOKEN", "line": 1, "column": 14, "matched": "ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ1234567890", "entropy": 5.27 } ] }, "latency_ms": 1, "server": "secretsniff/0.1.0", "protocol": "2024-11-05" }