English Français العربية

Netallion MCP Lite

Registre officiel Sécurité

Local secret & credential checks for AI-assisted dev — runs on your machine, results redacted.

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

PYPI package netallion-mcp-lite
Claude Code 
claude mcp add netallion-mcp-lite -- uvx netallion-mcp-lite==0.1.1
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "netallion-mcp-lite": {
            "command": "uvx",
            "args": [
                "netallion-mcp-lite==0.1.1"
            ]
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Netallion MCP Lite
  2. What it is (and isn't)
  3. Install & run
  4. Tools
  5. Privacy
  6. Scope & limitations
  7. Links
  8. License

Netallion MCP Lite

Free, local, IP-safe AI-development security — an MCP server from Netallion.

Netallion MCP Lite is a small Model Context Protocol server that helps you and your AI coding assistants avoid the most common mistake in AI-assisted development: leaking a credential. It flags a curated set of commodity, high-confidence secrets and credentials (AWS, GitHub, Stripe, OpenAI, private keys, database URIs, and more) in text and files.

It runs entirely on your machine. No account. No data sent to Netallion. Detected secrets are redacted before results are returned, so they are safe to hand back into an AI assistant's context.

Part of Netallion's Agentic Development Governance approach — secret detection is one capability, not the whole story.

What it is (and isn't)

Netallion MCP Lite (this package)Netallion AI Assurance (the platform)
PriceFreeCommercial (free trial)
RunsLocally, no accountSaaS + IDE + CI
Detection~27 commodity, high-confidence checksAdvanced detection well beyond commodity patterns
AI/MCP governance—AI provider governance, MCP governance
Policy & visibility—Central policy management, org-wide visibility
Compliance—Compliance and audit evidence
DataNothing leaves your machineEnterprise controls

MCP Lite is deliberately limited. It is a genuinely useful local utility and an on-ramp: if you want advanced detection, AI/MCP governance, central policy, and audit evidence across your organisation, that lives in Netallion AI Assurance.

This package does not contain or depend on Netallion's proprietary detection engine.

Install & run

Requires Python 3.10+.

pip install netallion-mcp-lite
# or, zero-install:
uvx netallion-mcp-lite

It speaks MCP over stdio. Add it to any MCP-compatible client (Claude, Cursor, Windsurf, VS Code, …):

{
  "mcpServers": {
    "netallion-mcp-lite": {
      "command": "netallion-mcp-lite"
    }
  }
}

Optionally confine scan_file to a specific directory:

{
  "mcpServers": {
    "netallion-mcp-lite": {
      "command": "netallion-mcp-lite",
      "env": { "NETALLION_MCP_LITE_WORKSPACE_ROOT": "/path/to/your/project" }
    }
  }
}

Tools

ToolWhat it does
scan_textScan a string for commodity secrets; returns redacted findings (rule, severity, line/column, remediation).
scan_fileScan a file inside the workspace root; sensitive files (.env, keys) are refused; findings redacted.
list_supported_checksList the commodity checks (no secrets).
aboutAbout the tool, privacy posture, and Lite vs AI Assurance.

Run list_supported_checks to see the full set. Findings never include the full secret value.

Privacy

Local-only. No telemetry. No source, file contents, prompts, or secrets are sent anywhere. See PRIVACY.md.

Scope & limitations

  • Commodity, high-confidence formats only — it will not catch obfuscated, encoded, or org-specific secrets. That is by design; advanced detection is part of Netallion AI Assurance.
  • scan_file reads only within a single workspace root and refuses obviously-sensitive files.
  • No generic high-entropy scanning (it produces noise without advanced technique).

We make no claims about detection rates, false-positive rates, customer adoption, certifications, or regulatory compliance for this free utility.

License

MIT — see LICENSE.

Questions fréquentes

Qu'est-ce que Netallion MCP Lite ?

Local secret & credential checks for AI-assisted dev — runs on your machine, results redacted.

Comment installer Netallion MCP Lite ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add netallion-mcp-lite -- uvx netallion-mcp-lite==0.1.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour Netallion MCP Lite ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

Netallion MCP Lite est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient Netallion MCP Lite ?

Il est publié par netallion. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.