pleasefixai/token-security
Identities, non-human identities, AI agents, secrets and findings from Token Security.
List the AI agents, copilots and MCP servers Token Security has observed in the environment, what they access and which identities run them. Use when the user asks "what AI agents do we have", "which agents touch production", or "who is running MCP servers".
For a user, service account, role, key or other identity, show what it can reach across platforms, who owns it, and how it has been used. Use when the user asks "what can X access", "who owns X", "is X still used", or before offboarding or rotating an identity.
Find exposed or stale credentials (API keys, tokens, passwords in code, chat or documents) and the identities they belong to. Use when the user asks "do we have leaked keys", "which secrets are in this repo", or "what does this secret unlock".