Ghosthunt MCP server
{
"mcpServers": {
"ghosthunt": {
"command": "npx",
"args": [
"-y",
"ghosthunt@latest",
"ghosthunt"
],
"env": {
"STRIPE_SECRET_KEY": "sk_live_...",
"OPENAI_API_KEY": "sk-..."
}
}
}
}{
"mcpServers": {
"ghosthunt": {
"command": "npx",
"args": [
"-y",
"ghosthunt@latest",
"ghosthunt"
],
"env": {
"STRIPE_SECRET_KEY": "sk_live_...",
"OPENAI_API_KEY": "sk-..."
}
}
}
}{
"mcpServers": {
"ghosthunt": {
"command": "npx",
"args": [
"-y",
"ghosthunt@latest",
"ghosthunt"
],
"env": {
"STRIPE_SECRET_KEY": "sk_live_...",
"OPENAI_API_KEY": "sk-..."
}
}
}
}{
"servers": {
"ghosthunt": {
"command": "npx",
"args": [
"-y",
"ghosthunt@latest",
"ghosthunt"
],
"env": {
"STRIPE_SECRET_KEY": "${input:stripe_secret_key}",
"OPENAI_API_KEY": "${input:openai_api_key}"
}
}
},
"inputs": [
{
"id": "stripe_secret_key",
"type": "promptString",
"description": "Stripe secret key",
"password": true
},
{
"id": "openai_api_key",
"type": "promptString",
"description": "Openai api key",
"password": true
}
]
}{
"mcpServers": {
"ghosthunt": {
"command": "npx",
"args": [
"-y",
"ghosthunt@latest",
"ghosthunt"
],
"env": {
"STRIPE_SECRET_KEY": "sk_live_...",
"OPENAI_API_KEY": "sk-..."
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y ghosthuntversion 1.0.0
Find every leaked secret on your machine — API keys in .env files, shell history, and configs.
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.
This server has not seen a commit in 4 mo. It may still work, but nobody is currently fixing it — check the alternatives before you build on it.