GitGuardian's official MCP server lets agents scan files for hardcoded secrets, list and resolve incidents, manage honeytokens and open remediation pull requests. The hosted server (US and EU) handles OAuth in the browser, and a local stdio mode runs with a personal access token. Available tools depend on the scopes granted to your token.
Connect
- 1Connect it in ChatGPT
Turn on Developer mode in ChatGPT (Settings → Security and login), open Plugins, select + and paste https://mcp.gitguardian.com/mcp as the MCP server URL, then sign in with OAuth. Add it to a chat from the composer's tools menu.
- 2Or add it to Codex or the API
codex mcp add gitguardian --url https://mcp.gitguardian.com/mcp codex mcp login gitguardianThe login command opens a browser to finish OAuth.
Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.
Things to ask
- “Scan this repository for hardcoded secrets before I push”
- “List open secret incidents assigned to me”
- “Resolve incident 4821 as revoked”
- “Generate a honeytoken for the staging environment”