Leakferret
Let the agent scan staged changes for secrets, verify findings, and rewrite leaks before you commit or ship.
Overview
Leakferret MCP is a MCP server for the Ship phase that lets your agent scan, verify, and rewrite secrets before committing code.
What is this MCP server?
- Context-aware secret scanning designed for agent-driven pre-commit review
- Verify findings so the agent does not blindly redact benign strings
- Rewrite or remediate detected secrets before commits land in history
- stdio MCP via npm @leakferret/mcp (registry 0.1.9)
- GitHub-hosted leakferrethq/leakferret for trust and updates
- Registry version 0.1.9; npm identifier @leakferret/mcp
- stdio transport; repository github.com/leakferrethq/leakferret
- Described capability triad: scan, verify, rewrite before committing
Community signal: 3 GitHub stars.
What problem does it solve?
It is easy to paste API keys into config or logs and only notice after git history or a public push makes rotation painful.
Who is it for?
Solo developers who want agent-assisted secret checks on every sensitive edit without standing up enterprise secret scanners first.
Skip if: Organizations that need full compliance programs, runtime secret managers only, or scanning with zero agent involvement.
What do I get? / Deliverables
The agent can run Leakferret-backed scans, confirm real leaks, and produce safer rewrites before you commit or deploy.
- Verified secret findings with context-aware classification
- Suggested or applied rewrites removing exposed credentials
- Safer commits without keys in tracked files
Recommended MCP Servers
Journey fit
How it compares
Pre-commit secret-scan MCP, not infrastructure monitoring or pentest automation marketplace skills.
Common Questions / FAQ
Who is Leakferret MCP for?
Individual builders and small teams using AI coding agents who want automated secret detection and rewrite help right before commits.
When should I use Leakferret MCP?
Use it during ship-phase security whenever you change env files, tokens, CI secrets, or integrations and before you commit or open a PR.
How do I add Leakferret MCP to my agent?
Add stdio MCP for @leakferret/mcp from npm per registry 0.1.9, restart Claude Code or Cursor, then call the server's scan and verify tools on your diff.