secrets audit mcp for Gemini CLI
io.github.eltociear/secrets-audit-mcp
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
client:Gemini CLI
transport:stdio
runtime:oci
Install secrets audit mcp in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"secrets-audit-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
]
}
}
}Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs