About
Overview
The TruffleHog MCP Server enables AI agents to detect leaked secrets. It scans Git repos, filesystems, and S3 buckets for API keys, passwords, and other sensitive data.
Capabilities
Tools & Capabilities
⚡scan_repo
Scan a Git repository for secrets
⚡scan_filesystem
Scan a directory for secrets
⚡list_findings
List found secrets
Setup
Installation
bash
Install
npx -y @trufflesecurity/mcp-server-trufflehogExamples
Example Usage
javascript
Usage
{
"mcpServers": {
"trufflehog": {
"command": "npx",
"args": ["-y", "@trufflesecurity/mcp-server-trufflehog"]
}
}
}Quick Info
Authortrufflesecurity
LanguageTypeScript
StatusStable
Stars★ 60
Last UpdatedFeb 12, 2026