tools.knurl/secret-scanner

Scan files, configs, or text for leaked secrets and risky misconfigurations.

Source

Official Registry

Updated

2026-06-24

// securityCaution

Remote endpoint· mcp.knurl.tools
Runs locally
Official / curated
Community-trusted

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "tools.knurl/secret-scanner" MCP server from askskill:
Run: claude mcp add --transport http 'tools-knurl-secret-scanner' 'https://mcp.knurl.tools/mcp'

// examples

Check environment configs for leaks

Prompt

Scan the following .env and config snippet for exposed secrets, tokens, passwords, and obviously unsafe settings. List findings by severity and include remediation advice:
DB_PASSWORD=admin123
AWS_SECRET_ACCESS_KEY=abcd1234example
DEBUG=true
ALLOWED_HOSTS=*

Expected

A list of detected secrets and misconfigurations with risk notes and fix recommendations.

Review code before commit

Prompt

Review this code and configuration before commit. Identify hardcoded credentials, test keys, webhook URLs, or other security issues, and explain how to replace or remove them.

Expected

A report of suspicious sensitive values, where they appear, why they are risky, and cleanup steps before committing.

Scan copied text output

Prompt

Scan this log, terminal output, or document text for exposed API keys, access tokens, connection strings, and common insecure settings. Return only the findings and remediation suggestions.

Expected

A concise summary of exposed secrets and configuration risks found in the text for immediate action.