/**
 * Credential Scope Audit Scanner
 *
 * Inspects credentials and tokens for over-scoping and rotation needs.
 * Detects common credential patterns and analyzes their permissions:
 * - GitHub PATs with excessive scopes
 * - AWS credentials with AdministratorAccess
 * - Unrotated tokens older than 90 days
 * - Hardcoded credentials in config
 *
 * @module scanners/agent/credential-scope-audit
 */
import type { AgentScannerResult, MCPManifest } from "./types.js";
/**
 * Run credential scope audit scanner
 */
export declare function runCredentialScopeAudit(manifest: MCPManifest, options?: {
    /** Directory to scan for config files */
    scanPath?: string;
    /** Also scan environment variables */
    scanEnvironment?: boolean;
    /** Additional files to scan */
    additionalFiles?: string[];
}): Promise<AgentScannerResult>;
/**
 * Check if credential scope audit is available
 */
export declare function checkCredentialScopeAuditAvailable(): Promise<{
    scanner: "credential-scope-audit";
    available: boolean;
    version: string;
}>;
/**
 * Get credential audit summary
 */
export declare function getCredentialAuditSummary(result: AgentScannerResult): {
    totalCredentials: number;
    byType: Record<string, number>;
} | null;
//# sourceMappingURL=credential-scope-audit.d.ts.map