The real catalog of tools for AI agents

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

Scans files for leaked secrets and API keys

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Check text for leaked credentials before an agent writes or commits it. Runs locally.

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

TOTP secret charset, secret discarded

Encrypted secret store and rotation for autonomous agent credentials

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

PII and secrets sanitization gateway with advanced OCR merging logic.

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

French address intelligence: 18.6M sold prices, energy, risk, crime and schools — each sourced.

Secret scanner preventing leaks of corporate keys and credentials.

Create a Secret Santa party with names, emails, a date, a place, and a budget.

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

Local MCP server for isolated, evidence-backed GDWEB design analysis and web search.

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.