Dev Tools & GitMCP RegistryremoteB · 71

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner MCP server

Name: Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner
Author: AnshumanAtrey

io.github.AnshumanAtrey · Updated 1mo ago

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner

At a glance

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner is an MCP server in the Dev Tools & Git category. It is hosted remotely and connects over HTTP, and needs Authorization. It scores B (71/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 0

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add --transport http betterleaks-cloud https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud --header 'Authorization: Bearer <YOUR_TOKEN>'

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
3
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes. It discovers them automatically.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "betterleaks-cloud": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud",
        "--header",
        "Authorization:${AUTH_HEADER}"
      ],
      "env": {
        "AUTH_HEADER": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
Why the wrapper?
This is a remote (HTTP) server and Claude Desktop only launches local processes, so mcp-remote proxies the connection. It will open a browser window if the server needs OAuth.
Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "betterleaks-cloud": {
      "url": "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.betterleaks-cloud]
command = "npx"
args = ["-y", "mcp-remote", "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud", "--header", "Authorization:${AUTH_HEADER}"]
env = { AUTH_HEADER = "Bearer <YOUR_TOKEN>" }

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
Why the wrapper?
Codex runs MCP servers as local processes, so mcp-remote bridges this HTTP endpoint to stdio.
Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "betterleaks-cloud": {
      "serverUrl": "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "betterleaks-cloud": {
      "type": "streamableHttp",
      "url": "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.

How to install Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "betterleaks-cloud": {
      "type": "http",
      "url": "https://mcp.apify.com/?tools=anshumanatrey/betterleaks-cloud",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace Bearer <YOUR_TOKEN> with your real value. Keep secrets out of any config file you commit.
Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What does Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner need from you?

Bearer token — Apify API token, as 'Bearer <apify-api-token>'. Runs bill to this account.

AuthorizationrequiredsecretHTTP header
Apify API token, as 'Bearer <apify-api-token>'. Runs bill to this account.

What tools does Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner expose?

This server requires credentials before it will list its tools, so we cannot enumerate them here. Connect it in your client to see what it offers.

What the code can do

This is a remote server — nothing is installed or run on your machine, so there is no local code to analyze. What it can reach is described above: your requests go to the provider's host.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Third-party hosted service — Your requests and any data in them are sent to mcp.apify.com.
No local execution — Nothing is installed or run on your machine.

Last commit 1 month ago — Actively maintained.
0 GitHub stars — Very little community usage so far.

Client compatibility

Claude Code: NativeClaude Desktop: Via mcp-remoteCursor: NativeCodex CLI: Via mcp-remoteWindsurf: NativeCline: NativeVS Code: Native

Health score

B · 71

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%99%
Last commit 35 days ago.
Adoption20%0%
0 stars.
Transparency20%75%
3/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✗ discoverable tool list.
Provenance15%75%
Links to its own repository; package linkage unverified.
Packaging15%100%
Remote endpoint with documented authentication.

Documentation

Full README

Betterleaks Cloud - GitHub & S3 Secret Scanner

Cloud-hosted Betterleaks v1.3.1 for hunting leaked API keys, wallet private keys, and credentials anywhere on GitHub, in cloned git repos, or in S3 / R2 / MinIO buckets. Optional live validation probes each detected secret against the vendor API to flag which ones are still active.

Available as an Apify Actor. $0.05 start + $0.05 per repo scanned + $0.30 per live-validated key. No install, no CLI, flat JSON output.

What does it do?

Scans a GitHub org, user, repo, pull request, issue, gist, action workflow, or S3 bucket for leaked credentials. Built on Betterleaks (the Gitleaks successor, maintained by the original Gitleaks author Zachary Rice + co-maintainers from Red Hat, Amazon, RBC). Every Betterleaks CLI flag is exposed as an input field. When you enable validation, each finding is probed live against the vendor API and tagged valid, invalid, revoked, unknown, or error.

How is it different from running Betterleaks locally?

| | Local Betterleaks CLI | This actor | |---|---|---| | Setup | Install Go binary, set up GitHub token, configure shell | Paste a JSON input | | Scope | One target at a time | github / git / s3 modes + our global_github mode (Code Search picks repos) | | Validation cost | Your machine's HTTP egress | Apify-managed, parallel workers | | Output handling | stdout JSON, parse yourself | Dataset records, filterable views | | Schedule | cron + DIY | Apify Schedules built-in | | Cost | Your laptop's electricity | $0.05 actor start + $0.05 per repo scanned |

How is it different from our gitleaks-github-secret-scanner actor?

| | gitleaks-cloud | betterleaks-cloud (this) | |---|---|---| | Engine | Gitleaks 8.x | Betterleaks 1.3.1 (Gitleaks successor) | | Live validation | not supported | yes (opt-in) | | Source types | github + git only | github, git, s3, dir, stdin, global_github | | Pricing | $0.01 + $0.02 per repo | $0.05 + $0.05 per repo + $0.30 per live-validated key | | Best for | Volume scanning, low cost per scan | Premium scans where "is the secret still live?" matters |

When should I use it?

Auditing your own GitHub org for secrets that slipped into commits
Bug bounty hunting where you want to validate keys live before reporting
Pre-acquisition security check on a target company's GitHub footprint
Continuous monitoring on a schedule, alerting on any new live-validated finding
Forensics: tracing which dangling commit on which PR ref leaked a credential
Scanning a Cloudflare R2 / AWS S3 bucket someone shared publicly

What does it cost?

Pay-per-event:

Excerpt — the full document is on GitHub.

Alternatives to Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner

Maintain Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/io-github-anshumanatrey-betterleaks-cloud)](https://mcp-skills-hub.vercel.app/mcps/io-github-anshumanatrey-betterleaks-cloud)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.