How do I install io.github.AnshumanAtrey/gitleaks-github-secret-scanner?

io.github.AnshumanAtrey/gitleaks-github-secret-scanner is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner) instead of running it locally.

What AI clients work with io.github.AnshumanAtrey/gitleaks-github-secret-scanner?

io.github.AnshumanAtrey/gitleaks-github-secret-scanner is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.AnshumanAtrey/gitleaks-github-secret-scanner actively maintained?

io.github.AnshumanAtrey/gitleaks-github-secret-scanner is actively maintained - last commit was 2 days ago. It has 2 GitHub stars.

io.github.AnshumanAtrey/gitleaks-github-secret-scanner

GitHub Secret Scanner - Find Leaked API Keys | Gitleaks

2 1 tool GitHub

No known CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: http

1 tool · ~39 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 17h ago

Edit this pageView history

io.github.AnshumanAtrey/gitleaks-github-secret-scanner is an MCP server that GitHub Secret Scanner - Find Leaked API Keys | Gitleaks. Its tool list has not been published yet over http, requires no API key, and scores 74/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-anshumanatrey-gitleaks-github-secret-scanner)](https://mcppedia.org/s/io-github-anshumanatrey-gitleaks-github-secret-scanner)

Read me

What io.github.AnshumanAtrey/gitleaks-github-secret-scanner does

GitHub Secret Scanner - Find Leaked API Keys | Gitleaks

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

74/100across 5 weighted dimensions

How we score →

0255075100

−26

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (1)

Click any tool to inspect its schema.

~39 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.AnshumanAtrey/gitleaks-github-secret-scanner safe to use?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.AnshumanAtrey/gitleaks-github-secret-scanner?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner) instead of running it locally.
What can io.github.AnshumanAtrey/gitleaks-github-secret-scanner do?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner provides 1 tool: Documentation. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.AnshumanAtrey/gitleaks-github-secret-scanner?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.AnshumanAtrey/gitleaks-github-secret-scanner actively maintained?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is actively maintained - last commit was 2 days ago. It has 2 GitHub stars.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

260 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

228 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.AnshumanAtrey/gitleaks-github-secret-scanner and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-anshumanatrey-gitleaks-github-secret-scanner)](https://mcppedia.org/s/io-github-anshumanatrey-gitleaks-github-secret-scanner)

Read me

What io.github.AnshumanAtrey/gitleaks-github-secret-scanner does

GitHub Secret Scanner - Find Leaked API Keys | Gitleaks

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

Cloud-hosted gitleaks for hunting leaked API keys, tokens, and credentials across GitHub - 30+ services including Indian fintech.

Available as an Apify Actor. Pay-per-event. The lightweight cheaper tier; sibling betterleaks-cloud adds live vendor-API validation.

Use it from an AI assistant:

Claude (claude.ai and the desktop app): Add Gitleaks Cloud to Claude, click Continue, sign in to Apify, Allow, and ask in plain words.
Claude Code: claude mcp add --transport http gitleaks-github-secret-scanner "https://mcp.apify.com?tools=anshumanatrey/gitleaks-github-secret-scanner", then run /mcp to sign in to Apify.
Codex: codex mcp add gitleaks-github-secret-scanner --url "https://mcp.apify.com?tools=anshumanatrey/gitleaks-github-secret-scanner", then codex mcp login gitleaks-github-secret-scanner.
Any other MCP client: https://mcp.apify.com?tools=anshumanatrey/gitleaks-github-secret-scanner, signed in with Apify or an Authorization: Bearer <APIFY_TOKEN> header.

What does it do?

Scans a GitHub user, org, or repo for leaked API keys and credentials across 30+ critical services: Razorpay, Stripe, AWS, OpenAI, Anthropic, Gemini, Supabase, Firebase, GitHub PATs, Twilio, SendGrid, Slack, Discord, Telegram, plus Indian fintech APIs (Cashfree, PayU, Surepass, Decentro, Karza, Attestr, Tartan). Smart key-secret pairing detects related credentials in the same file (e.g., Razorpay's two-part key_id + key_secret).

How is it different from running gitleaks CLI locally OR GitGuardian / Snyk Code subscriptions?

	running gitleaks CLI locally OR GitGuardian / Snyk Code subscriptions	This actor
Setup	Local gitleaks install + GitHub API integration	Cloud, zero install
Indian fintech detectors	Generic gitleaks: no specific Razorpay / Cashfree / PayU rules	Built-in detectors for Razorpay, Cashfree, PayU, Surepass, Decentro, Karza, Attestr, Tartan
Key-secret pairing	Each finding standalone	Smart pairing in same file
Cost	Free CLI but ops time; GitGuardian $5K+/year	Pay-per-event, no minimum
Validation	None	Sibling `betterleaks-cloud` adds live vendor-API validation

Tested on real Indian fintech repos: 47 razorpay-named GitHub repos scanned, 22 had leaks, 4 had production credentials in .env files including paired key_id + key_secret.

When should I use it?

DevSecOps - scan your own org for accidental commits of secrets
Bug bounty - hunt for live credentials in customer-facing public repos
Pre-acquisition security audit - check target company's open-source posture
Indian fintech compliance - sweep for Razorpay / Cashfree / PayU keys before regulator audit
Cheap secret-scanner alternative to GitGuardian / Snyk for low-volume use

What does it cost?

Pay-per-event:

Event	Price	When it fires
`Actor start`	$0.01	Charged once per run for the lister + scan orchestration, after the repos are found: a run whose input cannot be used costs nothing
`Per repo scanned`	$0.02	Charged once per repo successfully cloned and scanned. Unreachable repos are not charged. On paid Apify plans: $0.018 on Scale, $0.016 on Business and above. A run stops at its spending limit and names the repos it left out

Typical scan costs

Single repo: $0.03
10-repo scan: $0.21
100-repo bulk scan: $2.01

Which inputs does it take?

Field	Required	What it does
`target_url`	yes	GitHub user, org, or repo URL
`github_token`	no	Optional PAT for private repos and higher rate limits
`services`	no	Filter to specific services (default: all 30+)

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

74/100across 5 weighted dimensions

How we score →

0255075100

−26

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (1)

Click any tool to inspect its schema.

~39 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.AnshumanAtrey/gitleaks-github-secret-scanner safe to use?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.AnshumanAtrey/gitleaks-github-secret-scanner?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner) instead of running it locally.
What can io.github.AnshumanAtrey/gitleaks-github-secret-scanner do?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner provides 1 tool: Documentation. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.AnshumanAtrey/gitleaks-github-secret-scanner?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.AnshumanAtrey/gitleaks-github-secret-scanner actively maintained?: io.github.AnshumanAtrey/gitleaks-github-secret-scanner is actively maintained - last commit was 2 days ago. It has 2 GitHub stars.