Scan code for leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS keys, GitHub tokens, Stripe keys, private keys, JWTs, database URLs, and high-entropy strings. Returns redacted previews with severity levels and rotation recommendations. No external API — pure regex pattern matching.
| Name | Type | Required | Description |
|---|---|---|---|
| code | string | required | Code string to scan for secrets |
| filename | string | optional | Optional filename for context (e.g. 'config.ts', '.env.example') |
// MCP tool call
{
"name": "secrets_detection",
"arguments": {
"code": "",
"filename": ""
}
}
// Add to your MCP config — this tool is immediately available
{
"mcpServers": {
"toolbooth": { "url": "https://toolbooth.io/mcp" }
}
}