{"uid":"cap_uskbiQE2GdCys2PJRwP9B","slug":"npm-package-leak-detector-mcp-f7291fb0","name":"npm Package Leak Detector MCP","description":"The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.","url":"https://api.m2mcent.com/npm-package-leak-mcp/api/process?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"type":"json","example":{"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.08","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.08/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.08","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.08","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_WrdXUncbD-R2g32aVYP3O","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.08","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans npm package data to detect leaked secrets, credentials, or sensitive information embedded in package contents.","exampleAgentPrompt":"Can you scan this npm package data for any leaked secrets, API keys, or hardcoded credentials? Here's the package content: 'const apiKey = \"sk-abc123...\"; module.exports = apiKey;'","exampleUseCases":[{"title":"Pre-publish secret leak check","prompt":"Before I publish my npm package, can you scan its contents for any accidentally included API keys, tokens, or passwords? Here's the full source: 'require(\"dotenv\").config(); const key = process.env.STRIPE_KEY || \"sk_live_hardcoded123\";'"},{"title":"Supply chain security audit","prompt":"I want to audit this third-party npm package I'm about to add as a dependency — can you check its source for any embedded credentials or sensitive data leaks? The package data is: 'module.exports = { dbUrl: \"mongodb://admin:password@prod.example.com:27017\" }'"},{"title":"CI pipeline leak detection","prompt":"We found a suspicious npm package in our registry — can you analyze this package content and tell me if it contains any leaked secrets or hardcoded credentials I should be worried about? Content: 'const secret = \"ghp_realGitHubToken9999xyz\"; fetch(\"https://api.github.com\", {headers:{Authorization:secret}})'"}],"resultDescription":"Returns an analysis report identifying any detected leaked secrets, API keys, hardcoded credentials, tokens, or other sensitive data found within the provided npm package data, including details about the type and location of each finding.","failureModes":["Empty or malformed 'data' field returns an error or empty result","Very large package payloads may time out or be rejected","Obfuscated or minified code may reduce detection accuracy","False positives may be returned for placeholder or example credential strings","Non-npm or unrecognized data formats may not be analyzed correctly"],"whenToPreferThis":"Choose this endpoint when you need to programmatically detect leaked secrets or sensitive credentials within npm package content — especially before publishing packages, auditing third-party dependencies, or running automated supply-chain security checks. Prefer this over generic secret-scanning tools when working specifically with npm package data formats.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T18:47:55.822Z","isFirstParty":false,"canonicalSlug":"npm-package-leak-detector-mcp-f7291fb0"}