Netallion MCP Lite
A free, local, open-source MCP server for AI-development security. It runs commodity secret and credential checks entirely on your machine — no account, no telemetry, secrets redacted in all output.
uvx netallion-mcp-liteOr pip install netallion-mcp-lite, then add it as an MCP server in Claude Desktop, Cursor, VS Code, or any MCP-compatible client.
Local-only
Scanning runs entirely on your machine. No code, prompts, or findings ever leave your environment.
Secrets redacted
Every match is redacted in output — the tool tells you what and where, never the raw secret value.
No account, no telemetry
Nothing to sign up for and nothing phones home. Install, point your MCP client at it, done.
Open source (MIT)
Independently-authored commodity checks for public credential formats. Read every line on GitHub.
MCP tools it exposes
scan_text— Scan a snippet of text for exposed secrets and credentials.scan_file— Scan a workspace file (refuses .env files and key material by design).list_supported_checks— List the commodity credential formats it recognises.about— What the tool is, its privacy model, and where to go for more.
Ready for more than commodity checks?
MCP Lite is deliberately simple — public credential formats, on your machine. Netallion AI Assurance is the full control plane: live secret verification, BPE-tokenization detection, Prompt DLP, MCP server governance, non-human-identity lifecycle, guided remediation, and compliance evidence across logs, code, collaboration tools, and AI workflows.