Compatible with every major AI agent and IDE
What is the GitGuardian MCP Server?
Connect your GitGuardian workspace to any AI agent to strengthen your security posture and manage secret leaks through natural conversation.
What you can do
- Incident Management — List, retrieve, and resolve secret incidents. Assign team members to leaks and track remediation progress.
- Honeytokens — Create and manage decoy credentials (honeytokens) to detect unauthorized access to your private infrastructure.
- Security Scanning — Scan code snippets or content for secrets and sensitive data in real-time to prevent leaks before they happen.
- Audit & Compliance — Access detailed audit logs to monitor workspace activity and ensure compliance with security policies.
- Team Collaboration — Manage teams, members, and API tokens to orchestrate security operations across your organization.
How it works
- Subscribe to this server
- Enter your GitGuardian API Key
- Start monitoring and securing your code from Claude, Cursor, or any MCP-compatible client
Your AI acts as a 24/7 Security Operations Center (SOC) assistant, helping you triage alerts and deploy defenses without leaving your workflow.
Who is this for?
- Security Engineers — quickly triage secret incidents and manage honeytoken deployments across multiple environments.
- DevOps & SREs — automate security audits and monitor workspace health checks directly from the terminal or IDE.
- Developers — scan code for secrets before committing and check incident statuses without switching to the GitGuardian dashboard.
Built-in capabilities (49)
Assign a secret incident
Bulk lookup for honeytoken HMSL hashes
Create a custom tag
Create a honeytoken
Create a honeytoken note
Create a honeytoken within a context
Create a team
Delete a custom tag
Delete a custom tags key
Retrieve a custom tag
Check API health status
Retrieve a honeytoken
Retrieve quota overview
Retrieve secret incident details
Retrieve current API token details
Ignore a secret incident
List API tokens
List all existing event names for audit logs
List audit logs for your workspace
List custom tags
List health check history for an instance
List health checks
List all honeytokens events
List honeytoken notes
List sources where a honeytoken appears
List honeytokens
List IP allowlist rules
List GitGuardian's own IP addresses
List workspace members
List groups via SCIM
List members via SCIM
List secret incidents
List all sources
List team members
List teams
Scan multiple contents for secrets
Reset a honeytoken
Resolve a secret incident
Revoke a honeytoken
Revoke current API token
Scan content and create incidents automatically
Scan content for secrets
Trigger a health check
Trigger scans on sources
Full update of a custom tag
Partial update of a custom tag
Update a custom tags key
Update a honeytoken
Update a secret incident
Why Google ADK?
Google ADK natively supports GitGuardian as an MCP tool provider. declare Vinkius Edge URL and the framework handles discovery, validation, and execution automatically. Combine 49 tools with Gemini's long-context reasoning for complex multi-tool workflows, with production-ready session management and evaluation built in.
- —
Google ADK natively supports MCP tool servers. declare a tool provider and the framework handles discovery, validation, and execution
- —
Built on Gemini models, ADK provides long-context reasoning ideal for complex multi-tool workflows with GitGuardian
- —
Production-ready features like session management, evaluation, and deployment come built-in. not bolted on
- —
Seamless integration with Google Cloud services means you can combine GitGuardian tools with BigQuery, Vertex AI, and Cloud Functions
GitGuardian in Google ADK
GitGuardian and 4,000+ other MCP servers. One platform. One governance layer.
Teams that connect GitGuardian to Google ADK through Vinkius don't need to source, host, or maintain individual MCP servers. Every tool call runs inside a hardened runtime with credential isolation, DLP, and a signed audit chain.
Raw MCP | Vinkius | |
|---|---|---|
| Server catalog | Find and host yourself | 4,000+ managed |
| Infrastructure | Self-hosted | Sandboxed V8 isolates |
| Credential handling | Plaintext in config | Vault + runtime injection |
| Data loss prevention | None | Configurable DLP policies |
| Kill switch | None | Global instant shutdown |
| Financial circuit breakers | None | Per-server limits + alerts |
| Audit trail | None | Ed25519 signed logs |
| SIEM log streaming | None | Splunk, Datadog, Webhook |
| Honeytokens | None | Canary alerts on leak |
| Custom domains | Not applicable | DNS challenge verified |
| GDPR compliance | Manual effort | Automated purge + export |
Why teams choose Vinkius for GitGuardian in Google ADK
The GitGuardian MCP Server runs on Vinkius-managed infrastructure inside AWS — a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts. All 49 tools execute in hardened sandboxes optimized for native MCP execution.
Your AI agents in Google ADK only access the data you authorize, with DLP that blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade infrastructure, zero maintenance.

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
How Vinkius secures
GitGuardian for Google ADK
Every tool call from Google ADK to the GitGuardian MCP Server is protected by DLP redaction, cryptographic audit chains, V8 sandbox isolation, kill switch, and financial circuit breakers.
Frequently asked questions
Can I resolve a secret incident directly through the AI?
Yes. You can use the resolve_secret_incident tool by providing the incident ID. You can also use assign_secret_incident to delegate the fix to a specific team member.
How do I create a decoy credential to catch attackers?
Use the create_honeytoken tool. You can specify the type and name of the honeytoken, and GitGuardian will generate a decoy that alerts you if it's ever used.
Is it possible to scan a text block for secrets before I commit it?
Absolutely. Use the scan_content tool. Provide the document content and a filename, and the AI will return any detected secrets or policy violations found by GitGuardian's engine.
How does Google ADK connect to MCP servers?
Import the MCP toolset class and pass the server URL. ADK discovers and registers all tools automatically, making them available to your agent's tool-use loop.
Can ADK agents use multiple MCP servers?
Yes. Declare multiple MCP tool providers in your agent configuration. ADK merges all tool schemas and the agent can call tools from any server in a single turn.
Which Gemini models work best with MCP tools?
Gemini 2.0 Flash and Pro models both support function calling required for MCP tools. Flash is recommended for latency-sensitive use cases, Pro for complex reasoning.
McpToolset not found
Update: pip install --upgrade google-adk
Explore More MCP Servers
View all →
Chuanglan 253
10 toolsUltra-high volume SMS & 1-click login API — send verification codes, notifications, and bulk messages globally via Chuanglan 253.

Enverus Energy Intelligence
10 toolsEquip your AI agent to access global energy data, track drilling rigs, and monitor well production via the Enverus API.

Notion Alternative
13 toolsManage Notion pages, databases and blocks via API — search content, query databases, create rows and append blocks from any AI agent.

AI21 Labs
10 toolsAccess state-of-the-art language models for text generation, summarization, and semantic understanding at enterprise scale.
