GitGuardian integration
GitGuardian API for secret detection and remediation in code repositories. Scan code for exposed API keys, passwords, certificates, and other credentials. Monitor repositories in real-time, receive instant alerts on secret leaks, and track remediation progress. Essential for preventing credential exposure and maintaining security compliance in software development.
Say what should happen.
The workflow builds itself.
Common GitGuardian use cases
- access audit
- coverage audit
- commit scanning
- incident triage
- usage monitoring
- security dashboard
- intrusion detection
- severity adjustment
- honeytoken inventory
- coverage documentation
What you can do with GitGuardian
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Incident, 8 operations
assign_incidentAssign incidentPOSTAssigns a GitGuardian secret incident to a team member by email or member ID for investigation.get_incidentGet incidentGETRetrieves detailed information about a GitGuardian secret incident. Returns full context including occurrences, credential validity, feedback history, and remediation status.ignore_incidentIgnore incidentPOSTIgnores a GitGuardian secret incident with a documented reason: test_credential, false_positive, or low_risk.list_incidentsList incidentsGETLists secret incidents detected by GitGuardian. Returns exposed credentials with location, detector type, validity status, and remediation progress for security management.reopen_incidentReopen incidentPOSTReopens a previously resolved or ignored GitGuardian secret incident, setting its status back to TRIGGERED.resolve_incidentResolve incidentPOSTResolves a GitGuardian secret incident and optionally marks the credential as revoked/rotated.share_incidentShare incidentPOSTCreates a shareable link for a GitGuardian incident to share with developers for collaboration on remediation.update_incidentUpdate incidentPATCHUpdates a GitGuardian secret incident properties like severity and custom tags. For status changes, use dedicated resolve/ignore/assign endpoints.
Honeytoken, 2 operations
create_honeytokenCreate honeytokenPOSTCreates a GitGuardian AWS honeytoken for intrusion detection. Generates fake AWS credentials that alert when used, detecting unauthorized access or data exfiltration.list_honeytokensList honeytokensGETLists all GitGuardian honeytokens in the workspace with their status, trigger history, and configuration details.
Scan, 2 operations
multi_scan_contentMulti scan contentPOSTBatch scans multiple documents for secrets in a single GitGuardian API call. Efficient for scanning multiple files while consuming only 1 quota.scan_contentScan contentPOSTScans text content for exposed secrets using GitGuardian. Detects 350+ types of credentials including API keys, passwords, private keys, and tokens with high accuracy.
Detector, 1 operation
list_detectorsList detectorsGETLists GitGuardian secret detectors. Returns all credential types that can be detected including cloud keys, API tokens, private keys, and generic secrets.
Health, 1 operation
get_healthGet healthGETChecks GitGuardian API health and validates the API token. Returns status to verify connectivity and authentication.
Member, 1 operation
list_membersList membersGETLists GitGuardian workspace members. Returns team members with access levels, activity info, and active status for access management.
Quota, 1 operation
get_quotaGet quotaGETRetrieves GitGuardian API quota and usage information. Returns scan limits, remaining quota, and usage for the current period.
Source, 1 operation
list_sourcesList sourcesGETLists sources monitored by GitGuardian. Returns repositories and integrations being scanned with their health status, criticality, and incident counts.
Use GitGuardian from Claude Code, Cursor or Codex
Connect GitGuardian in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its GitGuardian operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect GitGuardian
- Create your workspace
Sign up free. Nothing to install.
- Connect GitGuardian once
Add your GitGuardian connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
- Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
GitGuardian integration FAQ
What can you do with the GitGuardian integration?
LiveContext exposes 17 operations on GitGuardian, covering incident, honeytoken, scan and detector. Common uses include access audit, coverage audit and commit scanning.
