secrets audit mcp for VS Code
io.github.eltociear/secrets-audit-mcp
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
client:VS Code
transport:stdio
runtime:oci
Install secrets audit mcp in VS Code
.vscode/mcp.json
{
"servers": {
"secrets-audit-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
]
}
}
}
Requires agent mode. MCP: Open User Configuration puts the same block in every workspace. VS Code docs