Skip to content
Vinkius

GitGuardian Connector for AI agents.

49 live capabilities

Manage secret leaks and honeytokens to secure your infrastructure.

Live agent request GitGuardian / Connector

Waiting for input…

AI Agent

Why people use GitGuardian

GitGuardian Secret Incident Management for Security Teams

With the GitGuardian MCP, you can triage these alerts via your AI agent. You can list incidents, assign them to team members, and resolve them using simple commands, turning a manual chore into a conversation.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • Visual Studio Code
  • Windsurf

What Vinkius changes

You get a hands-on security assistant that handles the grunt work of secret management.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

  1. Real-world use case 01

    Fast-tracking incident remediation

    A security engineer needs to find all active leaks.

  2. Real-world use case 02

    Checking code for hardcoded keys

    A developer wants to check a snippet before a commit.

  3. Real-world use case 03

    Setting up decoy credentials

    A DevOps lead wants to set up decoys.

Complete set · 49capabilities

The complete GitGuardian capability set.

These are the exact actions your AI can choose when you ask it to work with GitGuardian.

Capability set01 / 13

01—04

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 01 Capability

    Get secret incident

    Retrieve detailed information about a specific secret incident. Use this to get the full context of a leak.

  2. 02 Capability

    Get self api token

    Retrieve the details of your current API token. This helps you manage your own credentials for the Connector.

  3. 03 Capability

    List sources

    List all sources currently being monitored for secrets. Use this to see the scope of your security coverage.

  4. 04 Capability

    List team memberships

    List team members to see who belongs to which security groups. This helps with auditing internal permissions.

Capability set02 / 13

05—08

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 05 Capability

    Resolve secret incident

    Resolve a secret incident to clear it from your active alert list. Use this once a leak has been fixed.

  2. 06 Capability

    Revoke honeytoken

    Revoke a honeytoken to remove it from your environment. Use this if a decoy is no longer needed or is compromised.

  3. 07 Capability

    Ignore secret incident

    Ignore a secret incident if it's a false positive or already handled. This keeps your active alert list clean.

  4. 08 Capability

    List api tokens

    List all active API tokens for your workspace. Use this to audit who has access to your GitGuardian account.

Capability set03 / 13

09—12

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 09 Capability

    List audit log event names

    List all existing event names for your audit logs. This helps you understand what actions can be tracked.

  2. 10 Capability

    List audit logs

    List audit logs for your workspace to monitor recent activity. This is essential for compliance and security audits.

  3. 11 Capability

    List custom tags

    List all custom tags currently in use. Use this to see how your incidents are being organized.

  4. 12 Capability

    List health check history

    List health check history for a specific instance. This helps identify any recurring connectivity issues.

Capability set04 / 13

13—16

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 13 Capability

    List health checks

    List all current health checks for your workspace. Use this to monitor the status of your security instances.

  2. 14 Capability

    List honeytoken events

    List all honeytoken events to see when decoys were triggered. This provides a timeline of unauthorized access attempts.

  3. 15 Capability

    List honeytoken notes

    List honeytoken notes to see context for your decoys. This helps your team understand the purpose of different traps.

  4. 16 Capability

    List honeytoken sources

    List sources where specific honeytokens appear. Use this to track where your decoys are being deployed.

Capability set05 / 13

17—20

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 17 Capability

    List honeytokens

    List all honeytokens in your workspace. This gives you a full overview of your active decoy credentials.

  2. 18 Capability

    List ips

    List the IP addresses for the provider to help with firewall configuration. Use this to whitelist the necessary traffic.

  3. 19 Capability

    List members

    List all members of your workspace. Use this to verify who has access to your security capabilities.

  4. 20 Capability

    List scim groups

    List groups via SCIM for automated user management. This helps with large-scale organization syncing.

Capability set06 / 13

21—24

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 21 Capability

    List scim users

    List members via SCIM to keep user access in sync. Use this for automated provisioning and deprovisioning.

  2. 22 Capability

    List secret incidents

    List all secret incidents to see what needs attention. This is your primary way to view active security leaks.

  3. 23 Capability

    List teams

    List all teams in your organization. Use this to manage your security department's structure.

  4. 24 Capability

    Multiscan content

    Scan multiple pieces of content at once for secrets to save time. This is great for checking multiple files quickly.

Capability set07 / 13

25—28

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 25 Capability

    Reset honeytoken

    Reset a honeytoken to its original state after it's been triggered. This allows you to keep using the same decoy.

  2. 26 Capability

    Revoke self api token

    Revoke your current API token immediately if it's compromised. This is a critical safety feature for your account.

  3. 27 Capability

    Scan and create incidents

    Scan content and automatically create incidents for any secrets found. This automates the discovery and logging process.

  4. 28 Capability

    Scan content

    Scan a specific piece of content for secrets and sensitive data. Use this to check code snippets before they go live.

Capability set08 / 13

29—32

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 29 Capability

    Create honeytoken

    Create a new honeytoken to act as a decoy for unauthorized access. This is a core defense for your private infrastructure.

  2. 30 Capability

    Create honeytoken with context

    Create a honeytoken within a specific context for better tracking. This allows for more granular decoy management.

  3. 31 Capability

    Create team

    Create a new team to organize security operations and permissions. Use this to structure your organization's security roles.

  4. 32 Capability

    Delete custom tag

    Delete a custom tag that is no longer needed for your workflow. Keep your workspace metadata clean and relevant.

Capability set09 / 13

33—36

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 33 Capability

    Delete custom tags key

    Delete a custom tags key to clean up your workspace metadata. This helps manage your organizational taxonomy.

  2. 34 Capability

    Get custom tag

    Retrieve a custom tag to check its details or status. Use this to verify how specific incidents are categorized.

  3. 35 Capability

    Get health

    Check the current API health status to ensure your connection is active. This is a quick way to verify your setup.

  4. 36 Capability

    Get honeytoken

    Retrieve a specific honeytoken to see its current status. This helps you monitor which decoys are being targeted.

Capability set10 / 13

37—40

4 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 37 Capability

    Get quotas

    Retrieve a quota overview to monitor your usage limits. Stay on top of your account's capacity and limits.

  2. 38 Capability

    Assign secret incident

    Assign a specific secret incident to a team member for faster remediation. This helps keep your triage workflow organized.

  3. 39 Capability

    Bulk prefix lookup

    Perform a bulk lookup for honeytoken HMSL hashes to identify compromised decoys. Use this to quickly audit multiple entries.

  4. 40 Capability

    Create custom tag

    Create a custom tag to organize and filter your security incidents. This helps group similar types of leaks together.

Capability set11 / 13

41—43

3 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 41 Capability

    Create honeytoken note

    Create a note for a honeytoken to provide extra context on its purpose. This is useful for keeping your team informed.

  2. 42 Capability

    List ip allowlist

    List IP allowlist rules to manage access to your workspace. This is key for securing your administrative access.

  3. 43 Capability

    Trigger health check

    Trigger a manual health check to verify your workspace connection. Use this to test your setup on demand.

Capability set12 / 13

44—46

3 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 44 Capability

    Trigger source scans

    Trigger new scans on your sources to find recent leaks. Use this to manually refresh your security data.

  2. 45 Capability

    Update custom tag full

    Perform a full update on a custom tag's metadata. This helps you refine how you categorize security incidents.

  3. 46 Capability

    Update custom tag partial

    Perform a partial update on a custom tag. Use this to quickly change a single piece of tag information.

Capability set13 / 13

47—49

3 capabilities in this set.

Part of 49 available through GitGuardian.

  1. 47 Capability

    Update custom tags key

    Update a custom tags key to reflect new organizational rules. This keeps your metadata in sync with company policy.

  2. 48 Capability

    Update honeytoken

    Update a honeytoken's configuration or details. Use this to modify your decoys without creating new ones.

  3. 49 Capability

    Update secret incident

    Update a secret incident with new details or status. This helps keep your incident records accurate and current.

Set up in minutes

One URL. Then ask GitGuardian to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use GitGuardian from the conversation.

Choose your client

Live preview
Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP
https://edge.vinkius.com/vk_preview_NQtV8WXJZTZDwZLKUu4JIzBlR9PvO6RL6VjurLD6/mcp
  1. Step 01

    Open Connectors

    In Claude Web or Claude Desktop, open Settings and choose Connectors.

  2. Step 02

    Add the URL

    Choose Add custom connector, name it GitGuardian, and paste the URL above.

  3. Step 03

    Turn it on in chat

    Select +, open Connectors, and enable GitGuardian for the conversation.

Where the request belongs

Work GitGuardian can move forward.

Built around the request

This is for the security engineer who's tired of manual triage and the developer who's terrified of pushing a live key to production.

01

Security Engineer

Triage alerts and deploy honeytokens across multiple environments during a high-pressure incident.

02

DevOps Engineer

Automate security audits and monitor workspace health directly from the terminal or IDE.

03

Software Developer

Scan code for secrets before committing to avoid embarrassing leaks and security vulnerabilities.

When one Connector is not enough

Combine GitGuardian with the systems that finish the task.

View all recipes
01

MCP Workflow for Catching Leaked Secrets Fast

A leaked API key and a suspicious endpoint event happened 4 minutes apart , your agent connects the dots before you do

Build the capability set

Add more capabilities.

Each Connector adds new actions and data without changing how you work.

Browse Connectors
Aikido Security logo
01 16 capabilities

Aikido Security

Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.

View Connector
Snyk logo
02 9 capabilities

Snyk

Bring your Snyk code security ecosystem directly to your AI. Analyze vulnerabilities, project metadata, and scan issues right from your editor.

View Connector
Veracode logo
03 10 capabilities

Veracode

Bring Veracode AppSec to your AI. Analyze source code flaws, extract application profiles, and track vulnerabilities conversationaly.

View Connector
Semgrep logo
04 10 capabilities

Semgrep

Equip your AI agent with read/write access to Semgrep's SAST platform to audit code security findings, update triage statuses, and enforce custom semantic rules.

View Connector
Google Deps.dev Security Hacker logo
05 4 capabilities

Google Deps.dev Security Hacker

Transform your AI into a Senior DevSecOps Engineer. Instantly audit any open-source package, hunt for hidden supply-chain threats in dependency trees, and analyze full GitHub repositories using Google's deps.dev API. No authentication required.

View Connector
Security Audit Prover logo
06 1 capability

Security Audit Prover

An AI agent committed a Stripe API key to git, built SQL queries with string concatenation, and deployed an admin endpoint with no authentication. all in 4 minutes. The key was scraped from GitHub within 90 seconds. This capability forces input sanitization validation, secret management auditing, authentication enforcement, injection prevention, and dependency supply chain checks against OWASP Top 10.

View Connector

Bring your own AI

Change the model, client or framework. Keep GitGuardian connected.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • VS Code
  • Windsurf
  • ZCode
  • Cline
  • Zed
  • Continue
  • Kiro
  • Roo Code
  • Zencoder
  • Goose
  • Void
  • Augment Code
  • Amp
  • Qodo
  • Tabnine
  • Pieces
  • Sourcegraph Cody
  • JetBrains
  • Warp
  • Amazon Q
  • Antigravity
  • BoltAI
  • Raycast
  • Jan
  • LM Studio
  • AnythingLLM
  • Open WebUI
  • Msty
  • Cherry Studio
  • LibreChat
  • TypingMind
  • Chorus
  • 5ire
  • n8n
  • LangChain
  • LlamaIndex
  • CrewAI
  • Vercel AI SDK

Before you connect

Questions about GitGuardian.

The practical details behind the request, access and result.

Can GitGuardian MCP help me find leaked keys?

Yes, it lets your AI agent list all active secret incidents in your workspace so you can see what needs attention immediately.

How do I use GitGuardian MCP for honeytokens?

You can ask your agent to create decoys that alert you when someone tries to use them, helping you catch intruders early.

Does GitGuardian MCP support team management?

Yes, it lets you manage members and teams to organize how your organization handles security and incident response.

Can I scan code for secrets with GitGuardian MCP?

You can ask your agent to scan specific code snippets or content for sensitive data before you commit them to your repository.

Is GitGuardian MCP good for audit logs?

It allows you to retrieve workspace activity logs to ensure your team stays compliant with your internal security policies.

How does GitGuardian MCP handle secret incidents?

Your agent can list, retrieve, and resolve incidents, making it much easier to triage high-priority leaks without leaving your workflow.

Can I resolve a secret incident directly through the AI?

Yes. You can use the resolve_secret_incident capability by providing the incident ID. You can also use assign_secret_incident to delegate the fix to a specific team member.

How do I create a decoy credential to catch attackers?

Use the create_honeytoken capability. You can specify the type and name of the honeytoken, and GitGuardian will generate a decoy that alerts you if it's ever used.

Is it possible to scan a text block for secrets before I commit it?

Absolutely. Use the scan_content capability. Provide the document content and a filename, and the AI will return any detected secrets or policy violations found by GitGuardian's engine.

One connection away

Give your agent a direct line to GitGuardian.

Connect GitGuardian once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available