Optional. Normally the key is stored on this machine by `npx leakrank-guard login` (OS keychain, or ~/.config/leakrank/config.json at mode 0600), so no environment variable is needed. Set this only for CI or headless use. Secret.
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Scans your code changes for leaked secrets and insecure configuration, and returns actionable fixes to your AI coding agent. MCP server plus CLI for Claude Code, Cursor, Codex and Windsurf.
FAQ
What is LeakRank Guard?
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.
How do I install LeakRank Guard?
Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
Is LeakRank Guard official?
No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
How is the trust score calculated?
This listing scores 31 (Limited). The formula is published on the methodology page.
