What can you do with this server?

This server exposes secret-scanning capabilities as MCP tools, allowing AI assistants to scan various platforms and filesystems for leaked credentials and secrets. Scanning * Jira — Scan tickets for leaked secrets, with JQL query scoping and optional auto-posting of warning comments * Confluence — Scan pages using CQL query scoping * Slack — Scan channels using a bot token * GitHub — Scan repositories with optional branch/repo filtering * GitLab — Scan projects, including self-hosted instances * Zendesk — Scan tickets for leaked secrets * Linear — Scan issues for leaked secrets * Asana — Scan tasks with optional workspace/project scoping * Wrike — Scan tasks with optional folder/space scoping * Local filesystem — Scan a local path, with support for custom regex rules Monitoring & Analysis * Check scan status — Monitor progress of a running scan via its UUID * Get scan findings — Retrieve paginated, severity-filterable findings from completed scans * Analyze reports — Queue async AI-powered credential validation on scan results (requires n0s1 Professional) Other features: Multiple report formats (n0s1, sarif, gitlab), credentials passable as tool arguments or environment variables, and custom UUID assignment for scan reports.

Which integrations are available for this server?

Scan Asana tasks for leaked secrets, including task details and attachments. Scan Confluence pages for leaked secrets, including page content and attachments. Scan GitHub repositories for leaked secrets, including code, issues, and pull requests. Scan GitLab projects for leaked secrets, including code, issues, and merge requests. Scan Jira tickets for leaked secrets using the n0s1 engine, including ticket contents and metadata. Scan Linear issues for leaked secrets, including issue descriptions and comments. Scan Slack channels for leaked secrets, including messages and files. Scan Zendesk tickets for leaked secrets, including ticket comments and attachments.

How do I use n0s1-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@n0s1-mcp Scan the GitHub org mycompany for exposed API keys" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

n0s1-mcp

by spark1security

Overview Schema Related Servers Score Discussions

Python

Hybrid

n0s1-mcp

An MCP server that exposes n0s1 secret-scanning capabilities as tools for AI assistants (Claude, Cursor, etc.).

Scan Jira, Confluence, Slack, GitHub, GitLab, Zendesk, Linear, Asana, Wrike, and local filesystems for leaked secrets — directly from your AI workflow.

Quickstart

No install required. Add this to your MCP client config and run via uvx:

{
  "mcpServers": {
    "n0s1": {
      "command": "uvx",
      "args": ["n0s1-mcp"]
    }
  }
}

For Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json
For Claude Code: .claude/mcp.json in your project, or ~/.claude/mcp.json globally.

Related MCP server: vibescan-mcp-server

Available Tools

Tool	Description	Required params
`scan_jira`	Scan Jira tickets	`server`, `email`, `api_key`
`scan_confluence`	Scan Confluence pages	`server`, `email`, `api_key`
`scan_slack`	Scan Slack channels	`api_key`
`scan_github`	Scan GitHub repositories	`api_key`, `owner`
`scan_gitlab`	Scan GitLab projects	`api_key`, `owner`
`scan_zendesk`	Scan Zendesk tickets	`server`, `email`, `api_key`
`scan_linear`	Scan Linear issues	`api_key`
`scan_asana`	Scan Asana tasks	`api_key`
`scan_wrike`	Scan Wrike tasks	`api_key`
`scan_local`	Scan local filesystem	`scan_path`
`get_scan_status`	Get status of a running/completed scan	`report_uuid`
`get_scan_findings`	Get paginated findings for a completed scan	`report_uuid`
`analyze_report`	Submit or advance async AI credential validation	`report_uuid`

All scan_* tools accept these optional parameters:

Parameter	Description
`report_uuid`	UUID to assign to the scan report. When set, overrides the auto-generated UUID written to the report JSON.
`ai_analysis`	Queue async AI credential validation after the scan (requires n0s1 Professional)
`n0s1_api_key`	n0s1 API key; overrides `N0S1_TOKEN` env var
`allow_secret_upload`	Allow encrypted secrets to be uploaded to the n0s1 backend (default: `false`)

Pass wait_minutes to analyze_report (or directly on a scan tool alongside ai_analysis) to block until analysis completes.

Environment Variables

Credentials can be passed as tool arguments or pre-set as environment variables:

Variable	Used by
`N0S1_TOKEN`	All scan tools with `ai_analysis` — Professional mode uploads and AI analysis
`JIRA_TOKEN`	`scan_jira`, `scan_confluence`
`JIRA_EMAIL`	`scan_jira`, `scan_confluence`
`SLACK_TOKEN`	`scan_slack`
`GITHUB_TOKEN`	`scan_github`
`GITLAB_TOKEN`	`scan_gitlab`
`ZENDESK_TOKEN`	`scan_zendesk`
`ZENDESK_EMAIL`	`scan_zendesk`
`LINEAR_TOKEN`	`scan_linear`
`ASANA_TOKEN`	`scan_asana`
`WRIKE_TOKEN`	`scan_wrike`

Example with env vars pre-configured:

{
  "mcpServers": {
    "n0s1": {
      "command": "uvx",
      "args": ["n0s1-mcp"],
      "env": {
        "GITHUB_TOKEN": "ghp_...",
        "JIRA_TOKEN": "ATATT..."
      }
    }
  }
}

Usage Examples

Once connected, ask your AI assistant:

"Scan my Jira project SEC for leaked secrets"
"Check the GitHub org mycompany for exposed API keys"
"Scan the /home/user/project directory for secrets"
"Run an AI analysis on the scan report abc123"

For full parameter reference and AI analysis workflow details, see docs/ai.md.

Publishing to PyPI

pip install hatch
hatch build
hatch publish

License

GNU General Public License v3 — same as n0s1.

Install Server

license - permissive license

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

2wRelease cycle

6Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

GitGuardian MCP Serverofficial
Security Developer Tools CI/CD & DevOps
GitGuardian
A
license
-
quality
B
maintenance
Enables AI agents to scan projects for leaked secrets and manage security incidents using GitGuardian's comprehensive API. It supports automated secret detection, honeytoken creation, and remediation workflows to secure codebases without context switching.
Last updated 2026-07-30
37
MIT
vibescan-mcp-server
Security Penetration Testing Code Analysis
Aguantar
A
license
A
quality
F
maintenance
Enables scanning projects for leaked secrets and security issues directly from Claude Code, detecting secret categories, dangerous code patterns, and git hygiene issues.
Last updated 2026-03-19
2
1
MIT
GitGuardian MCP Server
Security Code Analysis
fastmcp-me
A
license
-
quality
D
maintenance
Enables AI agents to scan projects for secrets, manage incidents, and create honeytokens using GitGuardian's API.
Last updated 2026-01-19
MIT
secret-scanner
Security Code Analysis
Baneado98
A
license
A
quality
B
maintenance
Enables scanning diffs or code blobs for leaked secrets, returning a verdict with severity and masked findings, all processed locally with no data sent externally.
Last updated 2026-06-23
1
MIT

View all related MCP servers

Related MCP Connectors

SecurityScan
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
LaunchTrust
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
security-intel-mcp
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/spark1security/n0s1-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server

n0s1-mcp

Quickstart

Available Tools

Environment Variables

Usage Examples

Publishing to PyPI

License

Maintenance

Resources

Looking for Admin?

Tools

Related MCP Servers

GitGuardian MCP Serverofficial

vibescan-mcp-server

GitGuardian MCP Server

secret-scanner

Related MCP Connectors

Latest Blog Posts

MCP directory API