@trestlescan/mcp

The Model Context Protocol (MCP) server for Trestle, a local secret scanner for source code. It lets AI assistants check code for secrets such as API keys, tokens, and private keys before changes are written or committed.

This package runs trestle mcp over stdio. It installs the Trestle CLI (@trestlescan/cli) as a dependency and starts its MCP server. The scan runs entirely on your machine.

Use with an MCP client

Most clients launch the server for you from its MCP Registry entry. To configure it by hand, run the following over stdio, where the trailing path is the workspace to scan (it defaults to the current directory):

npx -y @trestlescan/mcp .

Example client configuration:

{
  "mcpServers": {
    "trestle": {
      "command": "npx",
      "args": ["-y", "@trestlescan/mcp", "."]
    }
  }
}

Links

• Trestle CLI: @trestlescan/cli
• Documentation: trestlescan.com/documentation/mcp
• Source code: github.com/toro-guapo/trestle

License

Apache-2.0