ByteZone
Back to listClaim this project

mongodbAI apps

kingfisher

Rust secret scanner from MongoDB with live validation, scope mapping, and optional revocation workflows.

  • Windows
  • macOS
  • Linux
  • Browser
  • Runs locally
  • Docker supported
  • Needs API key
Open websiteView on GitHub
kingfisher screenshot
Popularity
1.3k Stars
GitHub stars
Recent activity
10/7/2026
Updated in the last 30 days
License
APACHE-2.0
Permissive

Why it matters

We look beyond stars: what problem it solves, whether it creates real utility, and what makes its approach worth noticing.

Last 90 days

Problem

Secret leaks in repositories and collaboration platforms remain a persistent risk, while traditional tools often generate high false-positive rates and lack live validation.

Practical value

Delivers practical value through Rust and SIMD-accelerated large-scale scanning, integrated live credential validation, permission scope mapping, and a browser-based report viewer.

Innovation / differentiation

Differs from traditional scanners by combining a vector-scan regex engine, multi-source rule catalogs, direct credential revocation, and blast-radius mapping.

Leverage potential

Offers high leverage for security auditing workflows by integrating into CI pipelines, cloud storage, chat, and documentation platforms, alongside third-party report importing.

Why now

Released at a time when software supply chain security is heavily scrutinized and enterprises urgently need automated credential detection and lifecycle management.

Community activity

In the last 90 days there were 33 new issues and 89 pull requests; the bounded issue/PR samples include 13 issue authors and 10 PR contributors, with at least 21 releases.

Maintainer responsiveness

The 33-issue window sample had a 94% close rate, and the 89-pull-request sample had a 38% merge rate. Maintainer-response observations covered 61% of that issue sample, with a 85% response rate and median first response of 1.9 days.

10 contributors in PR sampleAt least 21 releasesIssue response rate 85% · sample 20 (61% coverage)Median first response 1.9dPR merge rate 38% · 89 sampled in window

Key highlights

  • Scan code, Git history, and integrated platforms (GitHub, GitLab, Azure Repos, Bitbucket, Gitea, Hugging Face, Jira, Con
  • Validate discovered credentials against provider APIs to reduce false positives
  • Revoke supported secrets directly from the CLI

Quick start

How it is installed, how hard it is, and where to start.

Docker supportedRuns locally

Best for

  • Developers who want to try it on their machine
  • People who prefer Docker deploys

Watch outs

  • 5 inferred from materials — review under Sources below

More about it

Kingfisher is MongoDB’s open-source secret scanner: Rust (including SIMD paths) for large codebases, plus live validation so findings are more than “looks like a key.” For security teams, false positives often cost more than missed heuristics.

It fits CI or periodic scans across monorepos and multi-repo estates. Detection still needs a human-owned rotation and access-reduction process—the tool finds leaks; governance decides what happens next.

Sources

Each field shows its status and source — expand to review.

10 · Expand

  • Latest release

    Verified

    v2.11.1

    Source: GitHub API · latest_release=v2.11.1 · 10/10/2026

  • License

    Verified

    Apache-2.0

    Source: GitHub API · license.spdx_id=Apache-2.0 · 10/10/2026

  • logo url

    Verified

    None

    Source: admin_cms · cms editor · 8/28/2026

  • needs api key

    Inferred from materials

    Yes

    Source: Project README · matched api key keywords · 8/24/2026

  • One-liner

    Verified

    {"en":"Rust secret scanner from MongoDB with live validation, scope mapping, and optional revocation workflows.","zh":"Kingfisher 是 MongoDB 开源的高性能密钥扫描与验证工具。它通过 Rust 和 SIMD 加速实现了大规模代码库扫描，不仅能检测泄露，还支持实时验证、权限范围映射及自动撤销。"}

    Source: heuristic_batch_publish · batch-publish-tools heuristic write · 8/24/2026

  • Platforms

    Inferred from materials

    windows, macos, linux, browser

    Source: Project README · windows,macos,linux,browser · 8/24/2026

  • Category hint

    Inferred from materials

    ai-apps

    Source: Project README · hint=ai-apps · 8/24/2026

  • screenshot url

    Verified

    None

    Source: admin_cms · cms editor · 8/28/2026

  • supports docker

    Verified

    Yes

    Source: Repository file · dockerfile=true; compose=false · 10/10/2026

  • supports local

    Inferred from materials

    Yes

    Source: Project README · matched local keywords · 8/24/2026

Related projects

Other verified projects matched by category, capabilities, and intended roles.

hermes-agent

A personal AI agent that runs locally or on remote infrastructure with terminal, messaging, memory, skills, and scheduled automation.

Same AI apps categoryActive in the last 30 days

ollama

A local model runner for Windows, macOS, and Linux with a REST API plus Python and JavaScript clients.

Same AI apps categoryActive in the last 30 days

ragflow

An open-source RAG engine fusing deep document understanding and agent capabilities to build grounded context layers for LLMs.

Same AI apps categoryActive in the last 30 days

unsloth

A desktop and developer toolkit for running, fine-tuning, and deploying language and diffusion models locally on Windows, macOS, and Linux.

Same AI apps categoryActive in the last 30 days

financial-services

Financial services reference agents, skills, and MCP connectors for Claude and Managed Agents.

Same AI apps categoryActive in the last 30 days

OpenCLI

Convert websites and logged-in Chrome sessions into CLI interfaces for humans and AI agents.

Same AI apps categoryActive in the last 30 days