MCP Secret Scrub

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "mcp-secret-scrub": {
      "command": "uvx",
      "args": [
        "mcp-secret-scrub"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Capabilities & Tool Schemas (3)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by MCP Secret Scrub.

redact

Callable MCP tool function

mask

Callable MCP tool function

hash

Callable MCP tool function

Documentation Overview

mcp-secret-scrub

mcp-name: io.github.sudo-ai-git/mcp-secret-scrub

Deterministic, no-LLM MCP server that scrubs secrets from text, logs, and transcripts before they enter agent context — and never leaks the value.

No LLM. No network. Pure structural detection. MIT. Crown-jewel-free.

The problem it solves

Before you hand raw text to an agent (or store it, or pass it to a tool), you often don't know whether it contains a live secret. Platform scrubbers miss patterns all the time — a private key, an nvapi- token, a github_pat_ token, an api_key= assignment mid-log. If that text reaches an LLM context or a persisted transcript, the secret is effectively exfiltrated.

This server answers, deterministically:

Which secrets are in this text, and can you redact them safely before it goes anywhere?

Detection coverage (deterministic profiles)

family	examples
AI provider keys	`sk-proj-…`, `sk-ant-api…`, `sk-or-v1-…`, `sk-…`, `nvapi-…`
Cloud / GitHub	`AKIA…`, `aws_secret_access_key=`, `ghp_…`, `gho_…`, `ghu_…`, `ghs_…`, `ghr_…`, `github_pat_…`
Identity / auth	JWTs (`eyJ…`), PEM private keys, `Bearer …`, `Basic …`, OAuth client secrets
Assignments	`api_key=`, `token=`, `secret=`, `password=`, `client_secret=`, `webhook_secret=`
Endpoints / DSNs	Discord webhooks, Slack `xox…`, SQL/Redis/Mongo/AMQP connection strings

The scan never returns the secret value — only its type, count, and position. That is a hard safety contract, enforced by test.

Tools (MCP)

tool	purpose
`scrub_text(text, mode, keep_label)`	redact / mask / hash secrets; returns scrubbed text (never the value)
`scan_text(text)`	detect which secret types are present (no mutation)
`report_full(text)`	scan + redact in one call, scrubbed preview + findings
`secret_profiles()`	list all supported detection profiles

Modes:

redact (default) → [REDACTED:TYPE]
mask → shows first 4 + last 2 chars
hash → deterministic SHA-256 prefix (reproducible across calls)

Quick start (stdio)

Terminal

pip install mcp-secret-scrub
mcp-secret-scrub          # stdio (default)

Or via uv/pipx for an installable console entry:

bash

pipx install mcp-secret-scrub

MCP client config:

config.json

{ "mcpServers": {
    "secret-scrub": { "command": "mcp-secret-scrub" }
}}

Streamable HTTP (remote / Smithery-publishable)

bash

python3 mcp_server.py --http --port 8138   # serves on http://<host>:8138/mcp/

Determinism & safety guarantees

Deterministic: same input → identical output in every mode, every call.
Never leaks: scan_text and scrub_text never emit the original token; _deterministic_hash is SHA-256 (no salt) so output is reproducible.
No LLM, no network: pure regex + reachable structure detection.
Input-safe: non-string input returns a clean error, not a traceback.

Verification

python3 test_detector.py — 14/14 core checks (detection, redaction, determinism, no-leak contract, benign/unicode/empty input, bad-mode)
python3 test_e2e.py — drives the real MCP stdio transport and asserts the secret does NOT cross the wire

License & provenance

MIT. Part of the sudo-ai-git deterministic no-LLM agent-trust MCP family (mcp-skill-sec · mcp-verify-claim · mcp-benchmark-hygiene · mcp-secret-scrub).

Read the full README →View source on GitHub →

Related MCP Servers

View all in Security View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

Last commit

11d ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about MCP Secret Scrub

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "mcp-secret-scrub": { "command": "npx", "args": ["-y", "mcp-secret-scrub"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

MCP Secret Scrub AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/mcp-secret-scrub?style=directory)](https://allmcps.com/mcp/mcp-secret-scrub)

HTML Embed

<a href="https://allmcps.com/mcp/mcp-secret-scrub"><img src="https://allmcps.com/api/badge/mcp-secret-scrub?style=directory" alt="MCP Secret Scrub on AllMCPs" /></a>

Technical Specs & Signals

CategorySecurity

51Quality signal: Good · 51/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools24/30

Adoption & activity4/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Featured

Moxie Docs MCP

MCP & Agent Skills for Automated Documentation, and codebase conventions + context

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge and attach your website — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 🔒 Security →Best MCP servers for Security →Alternatives to MCP Secret Scrub →Install in Claude Desktop Install in Cursor Install in VS Code

Documentation Overview

mcp-secret-scrub

mcp-name: io.github.sudo-ai-git/mcp-secret-scrub

Deterministic, no-LLM MCP server that scrubs secrets from text, logs, and transcripts before they enter agent context — and never leaks the value.

No LLM. No network. Pure structural detection. MIT. Crown-jewel-free.

The problem it solves

This server answers, deterministically:

Which secrets are in this text, and can you redact them safely before it goes anywhere?

Detection coverage (deterministic profiles)

family	examples
AI provider keys	`sk-proj-…`, `sk-ant-api…`, `sk-or-v1-…`, `sk-…`, `nvapi-…`
Cloud / GitHub	`AKIA…`, `aws_secret_access_key=`, `ghp_…`, `gho_…`, `ghu_…`, `ghs_…`, `ghr_…`, `github_pat_…`
Identity / auth	JWTs (`eyJ…`), PEM private keys, `Bearer …`, `Basic …`, OAuth client secrets
Assignments	`api_key=`, `token=`, `secret=`, `password=`, `client_secret=`, `webhook_secret=`
Endpoints / DSNs	Discord webhooks, Slack `xox…`, SQL/Redis/Mongo/AMQP connection strings

The scan never returns the secret value — only its type, count, and position. That is a hard safety contract, enforced by test.

Tools (MCP)

tool	purpose
`scrub_text(text, mode, keep_label)`	redact / mask / hash secrets; returns scrubbed text (never the value)
`scan_text(text)`	detect which secret types are present (no mutation)
`report_full(text)`	scan + redact in one call, scrubbed preview + findings
`secret_profiles()`	list all supported detection profiles

Modes:

redact (default) → [REDACTED:TYPE]
mask → shows first 4 + last 2 chars
hash → deterministic SHA-256 prefix (reproducible across calls)

Quick start (stdio)

Terminal

pip install mcp-secret-scrub
mcp-secret-scrub          # stdio (default)

Or via uv/pipx for an installable console entry:

bash

pipx install mcp-secret-scrub

MCP client config:

config.json

{ "mcpServers": {
    "secret-scrub": { "command": "mcp-secret-scrub" }
}}

Streamable HTTP (remote / Smithery-publishable)

bash

python3 mcp_server.py --http --port 8138   # serves on http://<host>:8138/mcp/

Determinism & safety guarantees

Deterministic: same input → identical output in every mode, every call.
Never leaks: scan_text and scrub_text never emit the original token; _deterministic_hash is SHA-256 (no salt) so output is reproducible.
No LLM, no network: pure regex + reachable structure detection.
Input-safe: non-string input returns a clean error, not a traceback.

Verification

python3 test_detector.py — 14/14 core checks (detection, redaction, determinism, no-leak contract, benign/unicode/empty input, bad-mode)
python3 test_e2e.py — drives the real MCP stdio transport and asserts the secret does NOT cross the wire

License & provenance

MIT. Part of the sudo-ai-git deterministic no-LLM agent-trust MCP family (mcp-skill-sec · mcp-verify-claim · mcp-benchmark-hygiene · mcp-secret-scrub).