secrets audit mcp for Windsurf
io.github.eltociear/secrets-audit-mcp
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
client:Windsurf
transport:stdio
runtime:oci
Install secrets audit mcp in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"secrets-audit-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/secrets-audit-mcp:1.0.1"
]
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs