# GitGuardian (MCP Server)

> Scan for leaked secrets and triage GitGuardian incidents from your agent

- Type: MCP server
- Publisher: GitGuardian (official)
- Categories: Security, Development
- Website: https://github.com/GitGuardian/ggmcp
- Source: https://github.com/GitGuardian/ggmcp
- Transport: streamable-http
- Server URL: https://mcp.gitguardian.com/mcp
- Sign-in: oauth
- Environment variables: GITGUARDIAN_PERSONAL_ACCESS_TOKEN
- GitHub stars: 39
- Listed: 2025-05-14

## About

GitGuardian's official MCP server lets agents scan files for hardcoded secrets, list and resolve incidents, manage honeytokens and open remediation pull requests. The hosted server (US and EU) handles OAuth in the browser, and a local stdio mode runs with a personal access token. Available tools depend on the scopes granted to your token.

## Install

1. **Connect it in ChatGPT** Turn on Developer mode in ChatGPT (Settings → Security and login), open Plugins, select + and paste https://mcp.gitguardian.com/mcp as the MCP server URL, then sign in with OAuth. Add it to a chat from the composer's tools menu.

2. **Or add it to Codex or the API**

   Codex CLI:

   ```bash
   codex mcp add gitguardian --url https://mcp.gitguardian.com/mcp
   codex mcp login gitguardian
   ```

   config.toml:

   ```toml
   [mcp_servers.gitguardian]
   url = "https://mcp.gitguardian.com/mcp"
   ```

   Responses API:

   ```python
   import os
   from openai import OpenAI
   
   client = OpenAI()
   
   response = client.responses.create(
       model="gpt-6-astra",
       tools=[{
           "type": "mcp",
           "server_label": "gitguardian",
           "server_url": "https://mcp.gitguardian.com/mcp",
           "authorization": os.environ["GITGUARDIAN_PERSONAL_ACCESS_TOKEN"],
           "require_approval": "never",
       }],
       input="Scan this repository for hardcoded secrets before I push",
   )
   print(response.output_text)
   ```

## Example prompts

- "Scan this repository for hardcoded secrets before I push"
- "List open secret incidents assigned to me"
- "Resolve incident 4821 as revoked"
- "Generate a honeytoken for the staging environment"

## Related

- [Chrome DevTools MCP](https://chatgptplugins.directory/mcp/chrome-devtools.md): Let coding agents control and debug a live Chrome browser
- [Playwright MCP](https://chatgptplugins.directory/mcp/playwright.md): Browser automation for agents via Playwright accessibility snapshots
- [GitHub](https://chatgptplugins.directory/mcp/github.md): Manage repos, issues, pull requests and Actions from your AI agent
- [Context7](https://chatgptplugins.directory/mcp/context7.md): Pull up-to-date, version-specific library docs into your coding agent
- [Supabase](https://chatgptplugins.directory/mcp/supabase.md): Manage Supabase databases, migrations, edge functions and logs
- [Stripe](https://chatgptplugins.directory/mcp/stripe.md): Query and act on your Stripe account and search Stripe docs from any agent

---
Source: https://chatgptplugins.directory/mcp/gitguardian · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.